How to: Configure Parameter Handling¶
When configuring handling of parameters, it is a bit different from other configurations we have dealt with earlier, where we enable a violation and configure its details. With parameters, there are a number of independent violations that need to be enabled on their own, as well as a parameter section to define further customization. See Reference: Parameters for more information on parameter violations.
{
"policy": {
"name": "parameters_blocking",
"template": {
"name": "POLICY_TEMPLATE_RATING_BASED"
},
"applicationLanguage": "utf-8",
"enforcementMode": "blocking",
"blocking-settings": {
"violations": [
{
"name": "VIOL_PARAMETER_MULTIPART_NULL_VALUE",
"alarm": true,
"block": true
},
{
"name": "VIOL_PARAMETER_NAME_METACHAR",
"alarm": true,
"block": true
},
{
"name": "VIOL_PARAMETER_VALUE_METACHAR",
"alarm": true,
"block": true
}
]
},
"parameters": [
{
"checkMetachars": true,
"parameterLocation": "any",
"valueType": "auto-detect",
"metacharsOnParameterValueCheck": true,
"name": "*",
"type": "wildcard"
}
]
}
}