ソースを参照

Adjusts Portal WAF cookie restrictions

Brad Poulton 4 年 前
コミット
e7acda6b83
1 ファイル変更13 行追加2 行削除
  1. 13 2
      submodules/waf_owasp_top10/waf_condition_size.tf

+ 13 - 2
submodules/waf_owasp_top10/waf_condition_size.tf

@@ -48,8 +48,19 @@ resource "aws_wafregional_size_constraint_set" "csrf_token_set" {
 
   size_constraints {
     text_transformation = "NONE"
-    comparison_operator = "EQ"
-    size                = "118"
+    comparison_operator = "GT"
+    size                = "50"
+
+    field_to_match {
+      type = "HEADER"
+      data = "cookie"
+    }
+  }
+
+  size_constraints {
+    text_transformation = "NONE"
+    comparison_operator = "LT"
+    size                = "256"
 
     field_to_match {
       type = "HEADER"