Check Fields

Path, Query, Header, JSON, XML, Form and Raw checks.

• What is Check Fields; into which seven parts does the WAF split a request to inspect it?WAF-07-001
• How do inheritance and "Rule Source" work in rules?WAF-07-002
• How do I make sure only the query parameters I allow reach a page (Allowed Query Parameters)?WAF-07-003
• Can I define required parameters (Required Query Parameters / Required Headers / Required Form Fields)?WAF-07-004
• Can I limit parameter name length and parameter count?WAF-07-005
• Can I restrict a parameter's value by length or regex pattern (Value length / Value pattern)?WAF-07-006
• Can I limit how many times the same parameter may repeat (Value count)?WAF-07-007
• Can I limit the total header / query size?WAF-07-008
• Can I require a specific header to be present?WAF-07-009
• What are the default header rules?WAF-07-010
• Can I block malformed (unparseable) JSON / XML / form bodies?WAF-07-011
• Can I forbid JSON or XML bodies entirely on a page (Block All JSON Contents / Block All XML Contents)?WAF-07-012
• Can I limit JSON / XML nesting depth?WAF-07-013
• Can I allow only specific keys in JSON; how are nested key paths written?WAF-07-014
• How are element and attribute paths defined in XML?WAF-07-015
• Can I allow only certain MIME types in file uploads?WAF-07-016
• Is the content of uploaded files scanned as well (OWASP Check in Upload)?WAF-07-017
• Can I turn off OWASP scanning for a specific parameter?WAF-07-018
• What does the "Detailed Log" option do; is a log written if I turn it off?WAF-07-019
• What does the Raw tab inspect; what happens to content that cannot be parsed?WAF-07-020
• What is the difference between Block Unparsed Contents and Block Unexpected Parser Errors?WAF-07-021
• What is Allowed Raw Body Mime Types used for?WAF-07-022
• What is the Raw inspection order?WAF-07-023
• Is form data scanned both raw and URL-decoded?WAF-07-024
• Does the file type check look at the client's Content-Type or at the file's content?WAF-07-025
• In multipart requests, is the whole body scanned separately as well?WAF-07-026