aws waf 特定链接不能访问

"GET /en/stores?page=185&country=US&sort=default&alpha= HTTP/1.1" 200 227757 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0"

翻页功能禁止使用：

/stores?page=1

/stores?page=2

/stores?page=3

完整链接：https://www.xx.com/stores?page=1

 

WAF web_acl配置

Rules:---->Add Rules---->Add my own rules and rule groups

Rule type:Rule builder

Rule：

Name: url_deny 自定义名称

Type:Regular rule

If a request matches all the statements (AND)

Statement 1

Field to match:URI path

Positional constraint:Contains string

Search string: /stores

Text transformations

• None (Priority 0)

AND

Statement 2

Field to match :Query string

Positional constraint:Contains string

Search string: page

Text transformations

• None (Priority 0)

action:block拒绝访问

意思是先满足链接中带有/stores，再满足链接中带有 page，才能拒绝访问,返回403 Forbidden

这样链接中带有/stores可以访问，但是同时满足 2 个条件就不能访问

 

 

规则：拒绝 page>=2 的请求

- 匹配条件：Query string 的正则匹配 (Matches regular expression) `page=([2-9]|[1-9][0-9]+)`

- 动作：Block

预设规则: Allow

此规则透过正则表达式撰写，若匹配到 Query String 中 page>=2 的整数，WAF 会阻挡该请求