Skip to content

Commit 7901de0

Browse files
Merge pull request #269841 from Miskatonic-Electronic/patch-26
Update application-gateway-waf-request-size-limits.md
2 parents 2609c31 + cf08a40 commit 7901de0

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

articles/web-application-firewall/ag/application-gateway-waf-request-size-limits.md

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -28,10 +28,9 @@ Only requests with Content-Type of *multipart/form-data* are considered for file
2828

2929

3030
>[!NOTE]
31-
>If you're running Core Rule Set 3.2 or later, and you have a high priority custom rule that takes action based on the content of a request's headers, cookies, or URI, this will take precedence over any max request size, or max file upload size, limits. This optimization let's the Web Application Firewall run high priority custom rules that don't require reading and/or measuring the full Web Application Firewall request (or file upload) first before performing the full request inspection.
31+
>If you're running Core Rule Set 3.2 or later, and you have a high priority custom rule that takes action based on the content of a request's headers, cookies, or URI, this will take precedence over any max request size, or max file upload size, limits. This optimization let's the Web Application Firewall run high priority custom rules that don't require reading the full request first.
3232
>
33-
>Example: If you have a custom rule with priority 0 (the highest priority) set to approve a request with the header xyz, even if the request's size is larger than your maximum request size limit, it will get approved. This is because the Web Application Firewall will attempt to run all high priority custom rules that don't require reading the request body before enforcing any rules or size constraints that require reading the full request body.
34-
33+
>**Example:** If you have a custom rule with priority 0 (the highest priority) set to allow a request with the header xyz, even if the request's size is larger than your maximum request size limit, it will get allowed before the max size limit is enforced
3534
3635
## Request body inspection
3736

0 commit comments

Comments
 (0)