I have reviewed the help document and not found if can use Wildcards in URL prefixes in exceptions.
For our exceptions we attempt to make them as narrow as possible. A current example getting a Cross Site Scripting block that customer is asking for an exception on.
Violated item= URL: /api/catalogproduct/138096/catalogproductdetail with each block having a different order number after the URL: /api/catalogproduct/ . So I have a changing value in the full URL.
In my exception can I use a wildcard to match this changing value so if Using HTTP Request URL Match: URL Prefixes - Operation: At Least One would this work and be valid?
/api/catalogproduct/*/catalogproductdetail
or */catalogproductdetail
Would be limited in this case to /api/catalogproduct/
Please bear with me if this is a simple answer or I have overlooked this in my searches.
#On-PremisesWAF(formerlySecuresphere)------------------------------
[Scott] Brandt
Security Engineer
Taylor Corporation
North Mankato [MN]
------------------------------