SANITY_HEADER_VALUE
- Prevents the injection of special encoded characters in header values.
Included Deny Rules
Rule name | Basic | Standard | Strict |
|---|---|---|---|
(default SAN_010b) Full-/half-width unicode in HTTP header value |
|
|
|
(default SAN_030b) Enforce printable ASCII characters in HTTP header value |
|
|
|
(default SAN_040b) Sanity check of Content-Type header value |
|
|
|
(default SAN_045b) Sanity check of multipart content-type header value |
|
|
|
(default SAN_050b) Unsafe character in HTTP header value |
|
| |
(default SAN_060b) Header value longer than 300 characters |
|
| |
(default SAN_070b) Sanity check of Accept-Encoding header value |
|
| |
(default SAN_080b) Sanity check of Accept-Language header value |
|
| |
(default SAN_090b) Sanity check of Accept header value |
|
| |
(default SAN_100b) Sanity check of Cache-Control header value |
|
|
|
(default SAN_110b) Sanity check of Sec-Fetch-headers value |
|
| |
(default SAN_120b) Sanity check of Range header value |
|
|
