Struct PostgresDollarQuoteTamper 

pub struct PostgresDollarQuoteTamper;

Postgres dollar-quoted string tamper.

Postgres accepts $tag$ ... $tag$ as a string literal where tag is any identifier (or empty). Quote-character-based WAF signatures looking for ' or " never fire on dollar-quoted payloads. Most popular Postgres-fronting WAFs (including the CRS default ruleset’s 942100-942380 family) don’t have dedicated dollar-quote pattern matchers.

Wraps any single-quoted string literal in the payload with a matching dollar-quote. Tag is a random four-letter identifier to defeat WAFs that special-case the empty tag.

Trait Implementations

impl TamperStrategy for PostgresDollarQuoteTamper

fn name(&self) -> &'static str

Returns the unique name of this tamper strategy.

fn description(&self) -> &'static str

Returns a description of what this strategy does.

fn tamper(&self, payload: &str, _context: Option<&str>) -> String

Transforms the input payload.

fn aggressiveness(&self) -> f64

Returns the aggressiveness score (0.0 = mild, 1.0 = extreme).

fn tamper_with_params( &self, payload: &str, context: Option<&str>, _params: &HashMap<String, Value>, ) -> String

Transforms the input payload with custom parameters.