Skip to content
This repository has been archived by the owner on Apr 24, 2024. It is now read-only.

UI-Validation for Expiration time field in CSRF/Protection section #45

Open
shubhammishra9 opened this issue Oct 11, 2021 · 0 comments
Open
Labels
bug Something isn't working schema

Comments

@shubhammishra9
Copy link
Collaborator

shubhammishra9 commented Oct 11, 2021

Observed no UI-validation for min and max values of 'Expiration time in seconds' field in CSRF/Protection section

Applied policy:
m3

If negative value, Error Message:
"error_message" : "Failed to import Policy 'myPolicy' from '/etc/app_protect/conf/waf-1633516938513.json': Could not update the CSRF 'CSRF'. Failed validating value '-120' for expirationTimeInSeconds: The value contains an illegal character ("-")"

Applied policy:
m2

If 0, Error Message:
"error_message" : "Failed to import Policy 'myPolicy' from '/etc/app_protect/conf/waf-1633516938513.json': Could not parse/validate the CSRF 'CSRF'. Illegal field value for expiration_time_in_seconds - 0, must be an "disabled""

Applied policy:
m1

If length > 5, Error Message:
"error_message" : "Failed to import Policy 'myPolicy' from '/etc/app_protect/conf/waf-1633516938513.json': Could not update the CSRF 'CSRF'. Failed validating value '100000' for expirationTimeInSeconds: The value is too long (maximum length = 5)"

@shubhammishra9 shubhammishra9 added the bug Something isn't working label Jan 10, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
bug Something isn't working schema
Projects
None yet
Development

No branches or pull requests

1 participant