ASM::uncaptcha

Description

Overrides the CAPTCHA action for a request mitigated during a Brute-Force attack. Consequently, the request will be forwarded to the origin server. If the present request was not supposed to be mitigated by CAPTCHA then the command has no effect.

Syntax

ASM::uncaptcha

Examples

when ASM_REQUEST_DONE {
    set i 0
    foreach {viol} [ASM::violation names] {
        if {$viol eq VIOLATION_ILLEGAL_PARAMETER} {
            set details [lindex [ASM::violation details] $i]
            set param_name [b64decode [llookup $details "param_data.param_name"]]
            #remove the bad parameter from the QS - does not work right in all cases, just for illustration!
            regsub -all "\?.*($param_name=^\&*)" [HTTP::uri] "?" $new_uri
            HTTP::uri $new_uri
            ASM::uncaptcha
        }
        set i [expr {$i+1}]
    }
}