瀏覽代碼

Adjusts Portal WAF cookie restrictions

Brad Poulton 4 年之前
父節點
當前提交
e7acda6b83
共有 1 個文件被更改,包括 13 次插入2 次删除
  1. 13 2
      submodules/waf_owasp_top10/waf_condition_size.tf

+ 13 - 2
submodules/waf_owasp_top10/waf_condition_size.tf

@@ -48,8 +48,19 @@ resource "aws_wafregional_size_constraint_set" "csrf_token_set" {
 
   size_constraints {
     text_transformation = "NONE"
-    comparison_operator = "EQ"
-    size                = "118"
+    comparison_operator = "GT"
+    size                = "50"
+
+    field_to_match {
+      type = "HEADER"
+      data = "cookie"
+    }
+  }
+
+  size_constraints {
+    text_transformation = "NONE"
+    comparison_operator = "LT"
+    size                = "256"
 
     field_to_match {
       type = "HEADER"