pub struct WafSimulateSignal {
pub _type: String,
pub detector: String,
pub detector_scope: DetectorScope,
pub redaction: Redaction,
pub location: Option<String>,
pub name: Option<String>,
pub value: Option<String>,
}Expand description
WafSimulateSignal : A signal detected during WAF simulation. The type, detector, detector_scope, and redaction fields are always present. The location, name, and value fields are present only when applicable to the signal category.
Fields§
§_type: StringThe type of signal detected (e.g., SQLI, XSS, CMDEXE, TRAVERSAL, BACKDOOR, LOG4J-JNDI, BLOCKED).
detector: StringThe detector engine that identified the signal (e.g., SQLI, LIBINJECTIONV5, LIBINJECTIONJS, or a rule ID).
detector_scope: DetectorScopeThe scope of the detector that identified the signal. Derived from the signal type and detection type at simulation time. system — built-in WAF rule (e.g., SQLI, XSS). workspace — workspace-level custom rule or signal (e.g., site.* prefix). account — account-level custom signal (e.g., corp.* prefix). unknown — scope could not be determined (e.g., tags fetch failed or unrecognized type).
redaction: RedactionThe redaction level applied to the detected value. Clients should handle unexpected string values gracefully, as new redaction types may be added.
location: Option<String>Where in the request the signal was detected (e.g., QUERYSTRING, POSTBODY, HEADER, HEADEROUT, POSTARG). Present for detection signals; absent for custom and action signals.
name: Option<String>The parameter or header name that triggered detection. Present when the WAF engine identifies a specific parameter or header.
value: Option<String>The matched payload value that triggered signal detection. For detection signals, contains the matched content. For BLOCKED signals, carries the WAF response code as a string. Absent for custom signals.
Implementations§
Source§impl WafSimulateSignal
impl WafSimulateSignal
Sourcepub fn new(
_type: String,
detector: String,
detector_scope: DetectorScope,
redaction: Redaction,
) -> WafSimulateSignal
pub fn new( _type: String, detector: String, detector_scope: DetectorScope, redaction: Redaction, ) -> WafSimulateSignal
A signal detected during WAF simulation. The type, detector, detector_scope, and redaction fields are always present. The location, name, and value fields are present only when applicable to the signal category.
Trait Implementations§
Source§impl Clone for WafSimulateSignal
impl Clone for WafSimulateSignal
Source§fn clone(&self) -> WafSimulateSignal
fn clone(&self) -> WafSimulateSignal
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more