Custom Ruleset
import { GetFirewallConfigCrs } from "@vercel/sdk/models/getfirewallconfigop.js";
let value: GetFirewallConfigCrs = {
sd: {
active: false,
action: "deny",
},
ma: {
active: false,
action: "log",
},
lfi: {
active: false,
action: "deny",
},
rfi: {
active: false,
action: "log",
},
rce: {
active: false,
action: "deny",
},
php: {
active: false,
action: "deny",
},
gen: {
active: false,
action: "log",
},
xss: {
active: false,
action: "deny",
},
sqli: {
active: false,
action: "log",
},
sf: {
active: false,
action: "log",
},
java: {
active: false,
action: "log",
},
};
Field | Type | Required | Description |
---|---|---|---|
sd |
models.GetFirewallConfigSd | ✔️ | Scanner Detection - Detect and prevent reconnaissance activities from network scanning tools. |
ma |
models.GetFirewallConfigMa | ✔️ | Multipart Attack - Block attempts to bypass security controls using multipart/form-data encoding. |
lfi |
models.GetFirewallConfigLfi | ✔️ | Local File Inclusion Attack - Prevent unauthorized access to local files through web applications. |
rfi |
models.GetFirewallConfigRfi | ✔️ | Remote File Inclusion Attack - Prohibit unauthorized upload or execution of remote files. |
rce |
models.GetFirewallConfigRce | ✔️ | Remote Execution Attack - Prevent unauthorized execution of remote scripts or commands. |
php |
models.GetFirewallConfigPhp | ✔️ | PHP Attack - Safeguard against vulnerability exploits in PHP-based applications. |
gen |
models.GetFirewallConfigGen | ✔️ | Generic Attack - Provide broad protection from various undefined or novel attack vectors. |
xss |
models.GetFirewallConfigXss | ✔️ | XSS Attack - Prevent injection of malicious scripts into trusted webpages. |
sqli |
models.GetFirewallConfigSqli | ✔️ | SQL Injection Attack - Prohibit unauthorized use of SQL commands to manipulate databases. |
sf |
models.GetFirewallConfigSf | ✔️ | Session Fixation Attack - Prevent unauthorized takeover of user sessions by enforcing unique session IDs. |
java |
models.GetFirewallConfigJava | ✔️ | Java Attack - Mitigate risks of exploitation targeting Java-based applications or components. |