[[waf]]
name = "Cloudfront"
vendor = "Amazon"
confidence_threshold = 0.3
evasions = ["CaseAlternation", "SqlCommentInsertion", "DoubleUrlEncode", "ContentTypeSwitch"]
source = "WAFW00F:cloudfront"
[[waf.signature]]
header_name = "server"
header_regex = "cloudfront"
weight = 0.5
[[waf.signature]]
body_regex = "generated by cloudfront \\(cloudfront\\)"
weight = 0.5