Module detect 

The built-in detections. Each inspects one normalized value (super::decode::normalize) and reports rule ids. Ids follow the OWASP Core Rule Set’s families so they’re familiar (942 SQL injection, 941 XSS, 930 traversal, 931 remote inclusion, 932 command injection, 934 SSRF, 944 Java, 913 scanners, 920 protocol), but the rules are rws’s own.

Structs

Rule

One built-in rule.

Constants

RULES

Functions

log4shell

Resolve Log4j’s lookup obfuscations (${lower:j}, ${::-n}, ${env:X:-d}) and look for a JNDI lookup.

rule

scanner

Scanner signatures in a (normalized) User-Agent.

value

The built-in rules matching one normalized value.