271 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
0
votes
0
answers
58
views
Meta Cloud - Recovering Lost WhatsApp Webhook Messages
We recently migrated our WhatsApp Business API to Meta Cloud. After going live, we noticed that a few incoming messages sent to our receive webhook were blocked by our WAF’s ModSecurity filter. As a ...
Advice
0
votes
1
replies
45
views
How restrictive are "Access" Cross-Domain Solutions (CDSs) as far as what information flows are allowed between security domains?
A CDS can be used to mediate information flows between two security domains, where such mediation needs to be more tightly controlled than what a firewall can offer. This is typically between the ...
0
votes
0
answers
164
views
cloudflare Warp getting through Firewall
I have a question regarding blocking the Cloud flare warp app on our application control in the firewall settings.
I have blocked all proxys and VPN's in the generic filters and the app is inside ...
0
votes
1
answer
74
views
Can AWS WAF Inspect Contents of a .tar.lz4 File in HTTP POST Requests?
I'm using AWS WAF with an Application Load Balancer to filter incoming HTTP requests to my api server for security.
My api server expects files to be uploaded as .tar archive compressed with lz4.
Is ...
0
votes
1
answer
66
views
Azure Application Gateway Client Requests Routing
For Azure Application Gateway with WAF enabled, does client requests filtered on WAF or NSG first?
0
votes
0
answers
41
views
Gitlab runner: is there a way to get the full html response?
I use a gitlab runner with docker as executor. It uses an image found on my-private-repo.com.
When it needs to pull the image from the private repository, it gets error "200 accepted". In fact, it ...
1
vote
1
answer
355
views
Azure Front Door WAF IP restrictions on azure static web apps
I've been working on setting up Azure Front Door custom rules for IP restrictions on Azure Static Web Apps. So far, I have:
Enabled the static web app to integrate with Front Door.
Created a WAF ...
-4
votes
2
answers
110
views
Unable to browse the Azure Ubuntu VM using its public IP in url
My Azure VM is up running, passed diagnostics. I can ssh into it, but ping public-ip failed.
Some details:
UbuntuVM:~$ curl localhost:80
Welcome to nginx!
...
But if I curled the index.html from my PC,...
-1
votes
1
answer
138
views
Terraform aws_wafv2_web_acl regex pattern check not works properly
resource "aws_wafv2_web_acl" "main" {
name = "main"
description = "main"
scope = "REGIONAL"
default_action {
allow {}
}
...
0
votes
1
answer
174
views
How to manage Azure AD authentication with private endpoints and WAF in a Spring Boot application?
I have configured Azure AD credentials in my Spring Boot project's application.properties file using the dependency spring-cloud-azure-starter-active-directory. Here is the configuration:
spring.cloud....
0
votes
1
answer
460
views
Reduced resource consumption for ModSecurity
I recently learned and implemented ModSecurity with the OWASP CRS rule set. I am implementing ModSec integration on Nginx in a K8s environment. The problem I encountered was that the ModSec ...
0
votes
1
answer
379
views
Exclude CRS rules for some specific URLs
I am a newcomer to OWASP ModSecurity, and I wanted to know how I should exclude some specific rules for certain URLs.
I've searched and found that I should exclude them in the modsecurity.conf file, ...
1
vote
2
answers
410
views
AWS WAF: Custom Responses are not accessible by browser
I've configured some rules with custom responses in AWS WAF to prevent some users from accessing my website based on their geographical location. I can see that these rules are working as intended ...
0
votes
1
answer
125
views
java.lang.IllegalArgumentException: null in WebSphere when Payload Size Increases
I'm encountering an issue in my Spring Boot application hosted on WebSphere. When the payload size increases, the application throws the following exception:
java.lang.IllegalArgumentException: null
...
2
votes
0
answers
128
views
Issue with POST Request in Next.js 14 via WAF in Production Environment
I am working on a project with Next.js 14 using the App Router. I encountered an issue where POST requests do not work in the production environment, but everything works fine in both the local and ...