Skip to content

Update exposed-credentials-check.mdx #17871

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Oct 30, 2024
Merged

Update exposed-credentials-check.mdx #17871

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
21fef71
Update exposed-credentials-check.mdx
zeinjaber Oct 30, 2024
0d7ae4d
Apply suggestions from PCX review
pedrosousa Oct 30, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion src/content/docs/waf/managed-rules/reference/exposed-credentials-check.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ Additionally, this managed ruleset also includes generic rules for other common
- Check credentials sent as JSON with `email` and `password` keys
- Check credentials sent as JSON with `username` and `password` keys

The default action for the rules in managed ruleset is _Exposed-Credential-Check Header_ (named `rewrite` in the API).
The default action for the rules in managed ruleset is _Exposed-Credential-Check Header_ (named `rewrite` in the API and the Security Events).

The managed ruleset also contains a rule that blocks HTTP requests already containing the `Exposed-Credential-Check` HTTP header used by the _Exposed-Credential-Check Header_ action. These requests could be used to trick the origin into believing that a request contained (or did not contain) exposed credentials.

Expand Down
Loading