Amazonka.WAFV2.Types.XssMatchStatement

Documentation

data XssMatchStatement

A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.

See: newXssMatchStatement smart constructor.

Constructors

XssMatchStatement'

Fields

• fieldToMatch :: FieldToMatch

  The part of the web request that you want WAF to inspect.

• textTransformations :: NonEmpty TextTransformation

  Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, WAF performs all transformations on the content of the request component identified by FieldToMatch, starting from the lowest priority setting, before inspecting the content for a match.

Instances

FromJSON XssMatchStatement

Defined in Amazonka.WAFV2.Types.XssMatchStatement

Methods

parseJSON :: Value -> Parser XssMatchStatement

parseJSONList :: Value -> Parser [XssMatchStatement]

ToJSON XssMatchStatement

Defined in Amazonka.WAFV2.Types.XssMatchStatement

Methods

toJSON :: XssMatchStatement -> Value

toEncoding :: XssMatchStatement -> Encoding

toJSONList :: [XssMatchStatement] -> Value

toEncodingList :: [XssMatchStatement] -> Encoding

Generic XssMatchStatement

Defined in Amazonka.WAFV2.Types.XssMatchStatement

Associated Types

type Rep XssMatchStatement :: Type -> Type

Methods

from :: XssMatchStatement -> Rep XssMatchStatement x

to :: Rep XssMatchStatement x -> XssMatchStatement

Read XssMatchStatement

Defined in Amazonka.WAFV2.Types.XssMatchStatement

Methods

readsPrec :: Int -> ReadS XssMatchStatement

readList :: ReadS [XssMatchStatement]

readPrec :: ReadPrec XssMatchStatement

readListPrec :: ReadPrec [XssMatchStatement]

Show XssMatchStatement

Defined in Amazonka.WAFV2.Types.XssMatchStatement

Methods

showsPrec :: Int -> XssMatchStatement -> ShowS

show :: XssMatchStatement -> String

showList :: [XssMatchStatement] -> ShowS

NFData XssMatchStatement

Defined in Amazonka.WAFV2.Types.XssMatchStatement

Methods

rnf :: XssMatchStatement -> ()

Eq XssMatchStatement

Defined in Amazonka.WAFV2.Types.XssMatchStatement

Methods

(==) :: XssMatchStatement -> XssMatchStatement -> Bool

(/=) :: XssMatchStatement -> XssMatchStatement -> Bool

Hashable XssMatchStatement

Defined in Amazonka.WAFV2.Types.XssMatchStatement

Methods

hashWithSalt :: Int -> XssMatchStatement -> Int

hash :: XssMatchStatement -> Int

type Rep XssMatchStatement

Defined in Amazonka.WAFV2.Types.XssMatchStatement

type Rep XssMatchStatement = D1 ('MetaData "XssMatchStatement" "Amazonka.WAFV2.Types.XssMatchStatement" "amazonka-wafv2-2.0-3v3WgpYn7RT5hSd6MsT5dN" 'False) (C1 ('MetaCons "XssMatchStatement'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fieldToMatch") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 FieldToMatch) :*: S1 ('MetaSel ('Just "textTransformations") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (NonEmpty TextTransformation))))

newXssMatchStatement

Arguments

:: FieldToMatch

$sel:fieldToMatch:XssMatchStatement'

-> NonEmpty TextTransformation

$sel:textTransformations:XssMatchStatement'

-> XssMatchStatement

Create a value of XssMatchStatement with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:fieldToMatch:XssMatchStatement', xssMatchStatement_fieldToMatch - The part of the web request that you want WAF to inspect.

$sel:textTransformations:XssMatchStatement', xssMatchStatement_textTransformations - Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, WAF performs all transformations on the content of the request component identified by FieldToMatch, starting from the lowest priority setting, before inspecting the content for a match.

xssMatchStatement_fieldToMatch :: Lens' XssMatchStatement FieldToMatch

The part of the web request that you want WAF to inspect.

xssMatchStatement_textTransformations :: Lens' XssMatchStatement (NonEmpty TextTransformation)

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, WAF performs all transformations on the content of the request component identified by FieldToMatch, starting from the lowest priority setting, before inspecting the content for a match.