Skip to content

Commit 5c0ef99

Browse files
Update application-gateway-waf-configuration.md
Minor update to examples in doc.
1 parent 3c76ebf commit 5c0ef99

File tree

1 file changed

+14
-12
lines changed

1 file changed

+14
-12
lines changed

articles/web-application-firewall/ag/application-gateway-waf-configuration.md

Lines changed: 14 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -93,18 +93,20 @@ The below table shows some examples of how you might structure your exclusion fo
9393
| Request body | RequestArgNames | EqualsAny | "" | Request body: `{"key1": ".zshrc", "key2":"sleep(5)"}` | `.zshrc` and `sleep(5)` |
9494
| Request body | RequestArgValues | Equals | `test` | Request body: `{"test": ".zshrc"}` | `.zshrc` |
9595
| Request body | RequestArgValues | EqualsAny | "" | Request body: `{"key1": ".zshrc", "key2":"sleep(5)"}` | `.zshrc` and `sleep(5)` |
96-
| Header | RequestHeaderKeys | Equals | `X-Scanner` | Header: `{k: "X-Scanner", v: "test"}` | `X-scanner` |
97-
| Header | RequestHeaderKeys | EqualsAny | "" | Header: `{k: "X-Scanner", v: "test"},{k: "x-ratproxy-loop", v: "value"}` | `X-Scanner` and `x-ratproxy-loop` |
98-
| Header | RequestHeaderNames | Equals | `head1` | Header: `{k: "head1", v: "X-Scanner"}` | `X-scanner` |
99-
| Header | RequestHeaderNames | EqualsAny | "" | Header: `{k: "head1", v: "myvar=1234"},{k: "User-Agent", v: "(hydra)"}` | `myvar=1234` and `(hydra)` |
100-
| Header | RequestHeaderValues | Equals | `head1` | Header: `{k: "head1", v: "X-Scanner"}` | `X-scanner` |
101-
| Header | RequestHeaderValues | EqualsAny | "" | Header: `{k: "head1", v: "myvar=1234"},{k: "User-Agent", v: "(hydra)"}` | `myvar=1234` and `(hydra)` |
102-
| Cookie | RequestCookieKeys | Contains | `/etc/passwd` | Header: `{k: "Cookie", v: "/etc/passwdtest=hello1"}` | `/etc/passwdtest` |
103-
| Cookie | RequestCookieKeys | EqualsAny | "" | Header: `{k: "Cookie", v: "/etc/passwdtest=hello1"},{k: "Cookie", v: ".htaccess=test1}` | `/etc/passwdtest` and `.htaccess` |
104-
| Cookie | RequestCookieNames | Equals | `arg1` | Header: `{k: "Cookie", v: "arg1=/etc/passwd"}` | `/etc/passwd` |
105-
| Cookie | RequestCookieNames | EqualsAny | "" | Header: `{k: "Cookie", v: "arg1=/etc/passwd"},{k: "Cookie", v: "arg1=.cshrc"}` | `/etc/passwd` and `.cshrc` |
106-
| Cookie | RequestCookieValues | Equals | `arg1` | Header: `{k: "Cookie", v: "arg1=/etc/passwd"}` | `/etc/passwd` |
107-
| Cookie | RequestCookieValues | EqualsAny | "" | Header: `{k: "Cookie", v: "arg1=/etc/passwd"},{k: "Cookie", v: "arg1=.cshrc"}` | `/etc/passwd` and `.cshrc` |
96+
| Header | RequestHeaderKeys | Equals | `X-Scanner` | <sup>*</sup>Header: `{k: "X-Scanner", v: "test"}` | `X-scanner` |
97+
| Header | RequestHeaderKeys | EqualsAny | "" | <sup>*</sup>Header: `{k: "X-Scanner", v: "test"},{k: "x-ratproxy-loop", v: "value"}` | `X-Scanner` and `x-ratproxy-loop` |
98+
| Header | RequestHeaderNames | Equals | `head1` | <sup>*</sup>Header: `{k: "head1", v: "X-Scanner"}` | `X-scanner` |
99+
| Header | RequestHeaderNames | EqualsAny | "" | <sup>*</sup>Header: `{k: "head1", v: "myvar=1234"},{k: "User-Agent", v: "(hydra)"}` | `myvar=1234` and `(hydra)` |
100+
| Header | RequestHeaderValues | Equals | `head1` | <sup>*</sup>Header: `{k: "head1", v: "X-Scanner"}` | `X-scanner` |
101+
| Header | RequestHeaderValues | EqualsAny | "" | <sup>*</sup>Header: `{k: "head1", v: "myvar=1234"},{k: "User-Agent", v: "(hydra)"}` | `myvar=1234` and `(hydra)` |
102+
| Cookie | RequestCookieKeys | Contains | `/etc/passwd` | <sup>*</sup>Header: `{k: "Cookie", v: "/etc/passwdtest=hello1"}` | `/etc/passwdtest` |
103+
| Cookie | RequestCookieKeys | EqualsAny | "" | <sup>*</sup>Header: `{k: "Cookie", v: "/etc/passwdtest=hello1"},{k: "Cookie", v: ".htaccess=test1}` | `/etc/passwdtest` and `.htaccess` |
104+
| Cookie | RequestCookieNames | Equals | `arg1` | <sup>*</sup>Header: `{k: "Cookie", v: "arg1=/etc/passwd"}` | `/etc/passwd` |
105+
| Cookie | RequestCookieNames | EqualsAny | "" | <sup>*</sup>Header: `{k: "Cookie", v: "arg1=/etc/passwd"},{k: "Cookie", v: "arg1=.cshrc"}` | `/etc/passwd` and `.cshrc` |
106+
| Cookie | RequestCookieValues | Equals | `arg1` | <sup>*</sup>Header: `{k: "Cookie", v: "arg1=/etc/passwd"}` | `/etc/passwd` |
107+
| Cookie | RequestCookieValues | EqualsAny | "" | <sup>*</sup>Header: `{k: "Cookie", v: "arg1=/etc/passwd"},{k: "Cookie", v: "arg1=.cshrc"}` | `/etc/passwd` and `.cshrc` |
108+
109+
<sup>*</sup> In these examples, "k" refers to "key" and "v" refers to "value".
108110

109111
## Exclusion scopes
110112

0 commit comments

Comments
 (0)