Skip to content

Commit 1c7c3a1

Browse files
committed
Update CloudflareXSSProbingPattern.yaml
1 parent d5d3e30 commit 1c7c3a1

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Solutions/Cloudflare/Analytic Rules/CloudflareXSSProbingPattern.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ query: |
2222
Cloudflare
2323
| where HttpRequestMethod in~ ('POST', 'PUT')
2424
| extend susp_ch = countof(ClientRequestURI, '%00')
25-
| where ClientRequestURI matches regex @'(alert\()|(alert\%28)|(String\.fromCharCode\()|(expression\(alert)' or susp_ch > s_threshold
25+
| where ClientRequestURI matches regex @'(alert\()|(alert\%28)|(String\.fromCharCode\()|(expression\(alert)' or susp_ch > s_threshold
2626
| extend CompleteUrl = strcat(HttpRequestHeaderHost,ClientRequestPath)
2727
entityMappings:
2828
- entityType: IP

0 commit comments

Comments
 (0)