pub struct WafSimulateSignal {
pub _type: String,
pub detector: String,
pub detector_scope: DetectorScope,
pub redaction: Redaction,
pub location: Option<String>,
pub name: Option<String>,
pub value: Option<String>,
}Expand description
WafSimulateSignal : A signal detected during WAF simulation. The type, detector, detector_scope, and redaction fields are always present. The location, name, and value fields are present only when applicable to the signal category.
Fields§
§_type: StringThe type of signal detected (e.g., SQLI, XSS, CMDEXE, TRAVERSAL, BACKDOOR, LOG4J-JNDI, BLOCKED).
detector: StringThe detector engine that identified the signal (e.g., SQLI, LIBINJECTIONV5, LIBINJECTIONJS, or a rule ID).
detector_scope: DetectorScopeThe scope of the detector that identified the signal. Derived from the signal type and detection type at simulation time. system — built-in WAF rule (e.g., SQLI, XSS). workspace — workspace-level custom rule or signal (e.g., site.* prefix). account — account-level custom signal (e.g., corp.* prefix). unknown — scope could not be determined (e.g., tags fetch failed or unrecognized type).
redaction: RedactionThe redaction level applied to the detected value. Clients should handle unexpected string values gracefully, as new redaction types may be added.
location: Option<String>Where in the request the signal was detected (e.g., QUERYSTRING, POSTBODY, HEADER, HEADEROUT, POSTARG). Present for detection signals; absent for custom and action signals.
name: Option<String>The parameter or header name that triggered detection. Present when the WAF engine identifies a specific parameter or header.
value: Option<String>The matched payload value that triggered signal detection. For detection signals, contains the matched content. For BLOCKED signals, carries the WAF response code as a string. Absent for custom signals.
Implementations§
Source§impl WafSimulateSignal
impl WafSimulateSignal
Sourcepub fn new(
_type: String,
detector: String,
detector_scope: DetectorScope,
redaction: Redaction,
) -> WafSimulateSignal
pub fn new( _type: String, detector: String, detector_scope: DetectorScope, redaction: Redaction, ) -> WafSimulateSignal
A signal detected during WAF simulation. The type, detector, detector_scope, and redaction fields are always present. The location, name, and value fields are present only when applicable to the signal category.