01-Nov-2021 02:35
03-Nov-2021 07:25
You can follow 2 approaches.
Neagtive Security - Allows everything, and reject what I know
when HTTP_REQUEST {
switch -glob [HTTP::uri] {
"/" -
"/abc"
{
reject
}
default {
return
}
}
}
Positive Security - Rejects everything and allow only what I know
when HTTP_REQUEST {
switch -glob [HTTP::uri] {
"/123*" -
"/234*"
{
return
}
default {
drop
}
}
}