F5 XC EMEA Workshop > Class 1 - F5 XC Services > Parameter Inspection Source |
Lab 2 - Testing¶
Let’s see what have changed first let’s make sure the good login is working
curl -H "Content-Type: application/json;charset=UTF-8" --data-raw "{\"email\":\"satoshi@bitcoin.com\",\"password\":\"bitcoin\"}" http://arcadia-re-$$makeId$$.workshop.emea.f5se.com/v1/login
Now let’s do the same but with the invalid email parameter. This time the request will get blocked.
curl -H "Content-Type: application/json;charset=UTF-8" --data-raw "{\"email\":\"11223344\",\"password\":\"bitcoin\"}" http://arcadia-re-$$makeId$$.workshop.emea.f5se.com/v1/login
We just have been able to demonstrate that F5 XC is not just a basic Web Application Firewall but also has also advanced Positive Security Policy capabilities which greatly enhance the security of the application.