We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent d5d3e30 commit 1c7c3a1Copy full SHA for 1c7c3a1
Solutions/Cloudflare/Analytic Rules/CloudflareXSSProbingPattern.yaml
@@ -22,7 +22,7 @@ query: |
22
Cloudflare
23
| where HttpRequestMethod in~ ('POST', 'PUT')
24
| extend susp_ch = countof(ClientRequestURI, '%00')
25
- | where ClientRequestURI matches regex @'(alert\()|(alert\%28)|(String\.fromCharCode\()|(expression\(alert)' or susp_ch > s_threshold
+ | where ClientRequestURI matches regex @'(alert\()|(alert\%28)|(String\.fromCharCode\()|(expression\(alert)' or susp_ch > s_threshold
26
| extend CompleteUrl = strcat(HttpRequestHeaderHost,ClientRequestPath)
27
entityMappings:
28
- entityType: IP
0 commit comments