aws waf 特定链接不能访问

标签：stores string waf aws Rule page 访问 链接

"GET /en/stores?page=185&country=US&sort=default&alpha= HTTP/1.1" 200 227757 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0"

翻页功能禁止使用：

/stores?page=1

/stores?page=2

/stores?page=3

完整链接：https://www.xx.com/stores?page=1

 

WAF web_acl配置

Rules:---->Add Rules---->Add my own rules and rule groups

Rule type:Rule builder

Rule：

Name: url_deny 自定义名称

Type:Regular rule

If a request matches all the statements (AND)

Statement 1

Field to match:URI path Positional constraint:Contains string Search string: /stores Text transformations

• None (Priority 0)

AND

Statement 2

Field to match :Query string Positional constraint:Contains string Search string: page Text transformations

• None (Priority 0)

action:block拒绝访问

意思是先满足链接中带有/stores，再满足链接中带有 page，才能拒绝访问,返回403 Forbidden

这样链接中带有/stores可以访问，但是同时满足 2 个条件就不能访问

 

标签：stores,string,waf,aws,Rule,page,访问,链接
From： https://www.cnblogs.com/yangmeichong/p/18469589