You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
.. causes the request to be blocked with HTTP 403 Forbidden, which is a correct action to do.
But in this case openresty debug error.log doesn't have the usual JSON string of why the request was blocked, because lua-resty-waf doesn't actually see this as matching a rule, because it just calls ngx.exit(ngx.HTTP_FORBIDDEN) inside of resty.waf.request.lua.
As discussed on IRC this should be fixed.
The text was updated successfully, but these errors were encountered:
Sending HTTP GET request thru lua-resty-waf reverse proxy with an invalid content-type:
curl -H "Content-Type:foobar" "http://reverseproxy.domain.tld/lua-resty-waf/index.html"
.. causes the request to be blocked with HTTP 403 Forbidden, which is a correct action to do.
But in this case openresty debug error.log doesn't have the usual JSON string of why the request was blocked, because lua-resty-waf doesn't actually see this as matching a rule, because it just calls ngx.exit(ngx.HTTP_FORBIDDEN) inside of resty.waf.request.lua.
As discussed on IRC this should be fixed.
The text was updated successfully, but these errors were encountered: