.. _waf_template_evasion_check:

waf template evasion-check
==========================

Check for evasion attempt


evasion-check Specification
---------------------------

	===================================== ==========================================================================
	===================================== ==========================================================================
	 **Type**                              *Configuration Resource*

	 **Element Name**                      evasion-check

	 **Element URI**                       /axapi/v3/waf/template/{name}/evasion-check

	 **Element Attributes**                evasion-check_attributes

	 **Schema**                             :download:`evasion-check schema <waf-template-evasion-check/waf-template-evasion-check.txt>`
	===================================== ==========================================================================





	**Operations Allowed:**




.. raw:: html

   <script type="text/javascript">
 function showExample(a,b) { document.getElementById(a+'_div').style.display = 'block'; document.getElementById(a+'_cl').style.display = 'block'; document.getElementById(a+'_eg').style.display = 'none';}
   function closeExample(a,b) { document.getElementById(a+'_div').style.display = 'none'; document.getElementById(a+'_cl').style.display = 'none'; document.getElementById(a+'_eg').style.display = 'block';}
 </script>
   <table width='90%' style='margin-left:5%'>



.. raw:: html

   <tr style='border-bottom: thin solid; border-top: thin solid'><th width=15%>Operation</th><th width=10%>Method</th><th>URI</th><th width=15%>Payload</th><th width=10%></th></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Create Object



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/waf/template/{name}/evasion-check



.. raw:: html

   </td><td valign = 'top'>


:ref:`2709_evasion-check_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Get Object



.. raw:: html

   </td><td valign = 'top'>


GET



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/waf/template/{name}/evasion-check



.. raw:: html

   </td><td valign = 'top'>


:ref:`2709_evasion-check_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Modify Object



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/waf/template/{name}/evasion-check



.. raw:: html

   </td><td valign = 'top'>


:ref:`2709_evasion-check_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Replace Object



.. raw:: html

   </td><td valign = 'top'>


PUT



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/waf/template/{name}/evasion-check



.. raw:: html

   </td><td valign = 'top'>


:ref:`2709_evasion-check_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Delete Object



.. raw:: html

   </td><td valign = 'top'>


DELETE



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/waf/template/{name}/evasion-check



.. raw:: html

   </td><td valign = 'top'>


:ref:`2709_evasion-check_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   </table>

.. _2709_evasion-check_attributes:

evasion-check attributes
------------------------

    **apache-whitespace**

        **Description** Check for whitespace characters in URL

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **decode-entities**

        **Description** Decode entities in internal url (default on)

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 1

    **decode-escaped-chars**

        **Description** Decode escaped characters such as \r \n \" \xXX \u00YY in internal url (default on)

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 1

    **decode-plus-chars**

        **Description** Decode '+' as space in URL (default on)

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 1

    **decode-unicode-chars**

        **Description** Check for evasion attempt using %u encoding of Unicode chars to bypass (default on)

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 1

    **dir-traversal**

        **Description** Check for directory traversal attempt (default on)

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 1

    **high-ascii-bytes**

        **Description** Check for evasion attempt using ASCII bytes with values

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 1

    **invalid-hex-encoding**

        **Description** Check for evasion attempt using invalid hex characters (not in 0-9,a-f)

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **max-levels**

        **Description** Max levels of encoding allowed in request (default 2)

        **Type:** number

        **Range:** 0-64

        **Default:** 2

    **multiple-encoding-levels**

        **Description** Check for evasion attempt using multiple levels of encoding

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **multiple-slashes**

        **Description** Check for evasion attempt using multiple slashes/backslashes

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **remove-comments**

        **Description** Remove comments from internal url

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **remove-spaces**

        **Description** Remove spaces from internal url (default on)

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 1

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters