Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Ruleset Engine] Clarify rewrite action #18465

Merged
merged 2 commits into from
Nov 28, 2024
Merged

[Ruleset Engine] Clarify rewrite action #18465

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
27d3fee
[Ruleset Engine] Clarify rewrite action
pedrosousa Nov 28, 2024
9399094
Specify action name in Security Events
pedrosousa Nov 28, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion src/content/docs/ruleset-engine/rules-language/actions.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -170,7 +170,7 @@ The available actions depend on the [phase](/ruleset-engine/about/phases/) where
</td>
<td>
<p>
Adjusts the URI path, query string, and/or HTTP headers of requests and responses, according to the rule configuration.
Rewrites the request (or response) by adjusting the URI path, query string, and/or HTTP request/response headers, according to the rule configuration.
</p>
<p>Only available in:</p>
<ul>
Expand Down
2 changes: 1 addition & 1 deletion src/content/docs/waf/managed-rules/check-for-exposed-credentials/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ The username and password credentials in clear text never leave the Cloudflare n

The WAF can perform one of the following actions when it detects exposed credentials:

- **Exposed-Credential-Check Header**: Adds a new HTTP header to HTTP requests with exposed credentials. Your application at the origin can then force a password reset, start a two-factor authentication process, or perform any other action. The name of the added HTTP header is `Exposed-Credential-Check` and its value is `1`.
- **Exposed-Credential-Check Header**: Adds a new HTTP header to HTTP requests with exposed credentials. Your application at the origin can then force a password reset, start a two-factor authentication process, or perform any other action. The name of the added HTTP header is `Exposed-Credential-Check` and its value is `1`. The action name is `Rewrite` in [Security Events](/waf/analytics/security-events/paid-plans/).

:::caution
While the header name is the same as when using the [**Add Leaked Credentials Checks Header** managed transform](/rules/transform/managed-transforms/reference/#add-leaked-credentials-checks-header), the header can have different values when using the managed transform (from `1` to `4`), depending on your Cloudflare plan.
Expand Down
Loading