Exempt one query string parameter

Stop one internal rule firing on one named query string argument, and leave it firing everywhere else, from Azion Console, the Azion CLI, or the API.

Last updated

View as Markdown Agent setup

You can create a WAF exception that stops one internal rule scoring one query string argument from Azion Console, the Azion CLI, or the API. The exception below stops rule 1013, the apostrophe rule, firing on the q argument of /search, and leaves it firing on every other argument, path, and header.

Prerequisites

  • The rule set that blocked the request, such as storefront-waf.
  • The id of the internal rule that fired. To read it, refer to Read the score of a blocked request.
  • The Azion CLI installed and a configured personal token, for the CLI procedure.
  • A personal token, for the API request.

Create the exception

To create the exception from Azion Console:

Open the WAF Rules page

Access Azion Console > Edge Libraries > WAF Rules.

Select the rule set that blocked the request
Open the Allowed Rules tab and select + Allowed Rule
Select the rule to exempt

In Rule ID, select 1013.

Describe the exception and restrict it to one path

In Description, enter Allow apostrophes in the storefront search term. In Path, enter /search.

Name the part of the request

In Condition, select Specific Query String Name and enter q in the Name field it reveals. In Operator, select contains.

Save the exception

Rule 1013 no longer scores the q argument of /search, and keeps scoring every other argument, path, and header.

For the same exception with every field it accepts explained, refer to Create a WAF exception.

Note — specific_query_string_name names one argument, so the condition takes a name; any_query_string_name takes match alone and covers every argument in the request. Two keys default wider than a false positive usually needs: rule_id defaults to 0, which is every internal rule, and operator defaults to contains, which treats name as a substring rather than a pattern.

Next steps

Exempt one request headerThe same shape for a header, and the condition that silently covers all of them.WAF ExceptionsEvery field an exception carries, and the fifteen match values a condition takes.