.ftw.kong-waf.yaml

version: "v0.0.1"
mode: 'cloud'
meta:
  engine: "coraza"
  platform: "go"
  annotations:
    - purpose: "CRS test suite"
testoverride:
  input:
    dest_addr: "127.0.0.1"
    port: 8000
test_overrides:
  input:
    - rule_id: 920100
      test_ids: [4]
      reason: 'Invalid uri, Coraza not reached - 404 page not found'
      output:
        status: 404
    - rule_id: 920100
      test_ids: [5]
      reason: 'Invalid uri, Coraza not reached - 404 page not found'
      output:
        status: 404
    - rule_id: 920100
      test_ids: [8]
      reason: 'Go/http allows a colon in the path. Test expects status 400 or 403 (Apache behaviour)'
      output:
        status: 200
        log:
          expect_ids: [920100]
    - rule_id: 920270
      test_ids: [4]
      reason: 'Rule works, log contains 920270. Test expects status 400 (Apache behaviour)'
      output:
        status: 200
    - rule_id: 920272
      test_ids: [5]
      reason: 'Rule works, log contains 920272. Test expects status 400 (Apache behaviour)'
      output:
        status: 200
    - rule_id: 920290
      test_ids: [1]
      reason: 'Rule works, log contains 920290. Test expects status 400 (Apache behaviour)'
      output:
        status: 200
    - rule_id: 920430
      test_ids: [8]
      reason: 'Go/http does not allow HTTP/3.0 - 505 HTTP Version Not Supported'
      output:
        status: 505
        log:
          no_expect_ids: [920430]
    - rule_id: 932200
      test_ids: [13]
      reason: 'wip'
    - rule_id: 934131
      test_ids: [5, 7]
      reason: 'TODO: check why we are failing to deobfuscate these payloads'