[Suggestion] Custom rule matching targets add Attack Type #993
Labels
enhancement
New feature or request
Comments
|
disable the xss module? |
safe1ine
changed the title
Lorna0
changed the title
but i just want to disable one of the path of a web site. Disable the xss module seems to be global? |
Lorna0
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
What would you like to be added or improved?
自定义规则匹配目标增加根据攻击类型匹配，可针对单一攻击类型放行，其他条件组合使用。
Why is it needed?
在线编辑html代码过程中payload可能存在
<img src="url"/>等之类的标签，命中XSS特征waf会进行拦截，白名单可针对接口地址及host放行，但这是全类型放行，是否可以增加针对单一攻击类型选择，放行某一攻击类型的请求？The text was updated successfully, but these errors were encountered: