OWASP

OWASP settings object used when configuring WAF.

Data model

`allowed_http_versions`	string	Allowed HTTP versions.
`allowed_methods`	string	A space-separated list of HTTP method names.
`allowed_request_content_type`	string	Allowed request content types.
`arg_length`	integer	The maximum number of arguments allowed.
`arg_name_length`	integer	The maximum allowed argument name length.
`combined_file_sizes`	integer	The maximum allowed size of all files (in bytes).
`created_at`	string	Date and time that the settings object was created.
`critical_anomaly_score`	integer	Score value to add for critical anomalies.
`crs_validate_utf8_encoding`	boolean	CRS validate UTF8 encoding.
`error_anomaly_score`	integer	Score value to add for error anomalies.
`high_risk_country_codes`	string	A space-separated list of country codes in ISO 3166-1 (two-letter) format.
`http_violation_score_threshold`	integer	HTTP violation threshold.
`inbound_anomaly_score_threshold`	integer	Inbound anomaly threshold.
`lfi_score_threshold`	integer	Local file inclusion attack threshold.
`max_file_size`	integer	The maximum allowed file size (in bytes).
`max_num_args`	integer	The maximum number of arguments allowed.
`notice_anomaly_score`	integer	Score value to add for notice anomalies.
`paranoia_level`	integer	The configured paranoia level.
`php_injection_score_threshold`	integer	PHP injection threshold.
`rce_score_threshold`	integer	Remote code execution threshold.
`restricted_extensions`	string	A space-separated list of allowed file extensions.
`restricted_headers`	string	A space-separated list of allowed header names.
`rfi_score_threshold`	integer	Remote file inclusion attack threshold.
`session_fixation_score_threshold`	integer	Session fixation attack threshold.
`sql_injection_score_threshold`	integer	SQL injection attack threshold.
`total_arg_length`	integer	The maximum size of argument names and values.
`updated_at`	string	Date and time that the settings object was last updated.
`warning_anomaly_score`	integer	Score value to add for warning anomalies.
`xss_score_threshold`	integer	XSS attack threshold.

Endpoints

Get the OWASP settings object

Deprecated

GET/service/service_id/wafs/firewall_id/owasp

Create an OWASP settings object

Deprecated

POST/service/service_id/wafs/firewall_id/owasp

Update the OWASP settings object

Deprecated

PATCH/service/service_id/wafs/firewall_id/owasp