Struct WafCfg 

pub struct WafCfg {
    pub mode: String,
    pub sqli: bool,
    pub xss: bool,
    pub path_traversal: bool,
    pub inspect_path: bool,
    pub inspect_headers: bool,
    pub inspect_body: bool,
    pub rules: Vec<WafRule>,
}

WAF-lite input inspection (Phase 4 / v2). Screens a request for common attack signatures before it is forwarded, using built-in heuristic rulesets (SQLi/XSS/path-traversal) plus any operator-defined deny patterns. Disabled by default — these are heuristics, so the intended rollout is report (log + count matches without blocking) until the operator is confident, then block (return 403). Compiled into a crate::waf::WafEngine.

Fields

mode: String

“off” (default) | “report” | “block”. report evaluates rules and logs/counts matches but forwards the request anyway; block rejects a matching request with 403.

sqli: bool

Enable the built-in SQL-injection heuristic ruleset.

xss: bool

Enable the built-in cross-site-scripting heuristic ruleset.

path_traversal: bool

Enable the built-in path-traversal heuristic ruleset.

inspect_path: bool

Inspect the request path + query string (matched raw and percent-decoded). Default true.

inspect_headers: bool

Inspect request header values. Off by default: header bytes (cookies, tokens, opaque blobs) are noisy and prone to false positives.

inspect_body: bool

Inspect the request body (already capped by validation.max_body). Off by default.

rules: Vec<WafRule>

Operator-defined deny patterns, evaluated alongside the enabled built-in rulesets.

Trait Implementations

impl Clone for WafCfg

fn clone(&self) -> WafCfg

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WafCfg

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for WafCfg

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for WafCfg

where WafCfg: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.