BOOL, can be read and
set, but not
true by the WAF when a request matches any enabled WAF rule.
Matching a WAF rule will not always flag the request for blocking, since WAF rules may be enabled in a logging-only mode, and scoring rules do not cause a request to be blocked unless the total score for their category exceeds a threshold. If a rule is matched and it flags a request to be blocked, then
waf.blocked will be also set to
waf_debug_log subroutine, the value of this variable will always be
This variable is write-once. A second attempt to
set it will not change the value.