I have a rule with `lower(http.request.uri.path) contains "wp-" or lower(http.request.uri.path) cont

I have a rule with

lower(http.request.uri.path) contains "wp-" or lower(http.request.uri.path) contains ".env"

lower(http.request.uri.path) contains "wp-" or lower(http.request.uri.path) contains ".env"

lower(http.request.uri.path) contains "wp-" or lower(http.request.uri.path) contains ".env"

lower(http.request.uri.path) contains "wp-" or lower(http.request.uri.path) contains ".env" which I block on