Copyright | (c) 2013-2023 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | Safe-Inferred |
Language | Haskell2010 |
Synopsis
- data SizeConstraintStatement = SizeConstraintStatement' {}
- newSizeConstraintStatement :: FieldToMatch -> ComparisonOperator -> Natural -> NonEmpty TextTransformation -> SizeConstraintStatement
- sizeConstraintStatement_fieldToMatch :: Lens' SizeConstraintStatement FieldToMatch
- sizeConstraintStatement_comparisonOperator :: Lens' SizeConstraintStatement ComparisonOperator
- sizeConstraintStatement_size :: Lens' SizeConstraintStatement Natural
- sizeConstraintStatement_textTransformations :: Lens' SizeConstraintStatement (NonEmpty TextTransformation)
Documentation
data SizeConstraintStatement Source #
A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.
If you configure WAF to inspect the request body, WAF inspects only the first 8192 bytes (8 KB). If the request body for your web requests never exceeds 8192 bytes, you could use a size constraint statement to block requests that have a request body greater than 8192 bytes.
If you choose URI for the value of Part of the request to filter on, the
slash (/) in the URI counts as one character. For example, the URI
/logo.jpg
is nine characters long.
See: newSizeConstraintStatement
smart constructor.
SizeConstraintStatement' | |
|
Instances
newSizeConstraintStatement Source #
:: FieldToMatch | |
-> ComparisonOperator | |
-> Natural | |
-> NonEmpty TextTransformation | |
-> SizeConstraintStatement |
Create a value of SizeConstraintStatement
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:fieldToMatch:SizeConstraintStatement'
, sizeConstraintStatement_fieldToMatch
- The part of the web request that you want WAF to inspect.
$sel:comparisonOperator:SizeConstraintStatement'
, sizeConstraintStatement_comparisonOperator
- The operator to use to compare the request part to the size setting.
$sel:size:SizeConstraintStatement'
, sizeConstraintStatement_size
- The size, in byte, to compare to the request part, after any
transformations.
$sel:textTransformations:SizeConstraintStatement'
, sizeConstraintStatement_textTransformations
- Text transformations eliminate some of the unusual formatting that
attackers use in web requests in an effort to bypass detection. If you
specify one or more transformations in a rule statement, WAF performs
all transformations on the content of the request component identified
by FieldToMatch
, starting from the lowest priority setting, before
inspecting the content for a match.
sizeConstraintStatement_fieldToMatch :: Lens' SizeConstraintStatement FieldToMatch Source #
The part of the web request that you want WAF to inspect.
sizeConstraintStatement_comparisonOperator :: Lens' SizeConstraintStatement ComparisonOperator Source #
The operator to use to compare the request part to the size setting.
sizeConstraintStatement_size :: Lens' SizeConstraintStatement Natural Source #
The size, in byte, to compare to the request part, after any transformations.
sizeConstraintStatement_textTransformations :: Lens' SizeConstraintStatement (NonEmpty TextTransformation) Source #
Text transformations eliminate some of the unusual formatting that
attackers use in web requests in an effort to bypass detection. If you
specify one or more transformations in a rule statement, WAF performs
all transformations on the content of the request component identified
by FieldToMatch
, starting from the lowest priority setting, before
inspecting the content for a match.