F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Attack Protection Command Reference-6PW100

79
content-filtering url-filter parameter
Use content-filtering url-filter parameter to add URL parameter filtering keywords to the URL parameter
filtering entry list.
Use undo content-filtering url-filter parameter to remove URL parameter filtering keywords from the list.
Syntax
content-filtering url-filter parameter { default | keywords keywords }
undo content-filtering url-filter parameter [ default | keywords keywords ]
Views
System view
Default command level
2: System level
Parameters
default: Specifies the predefined parameter filtering keywords, including: ^select$, ^insert$, ^update$,
^delete$, ^drop$, --, ', ^exec$, and %27.
keywords keywords: Specifies a user-defined parameter filtering keyword. The keywords argument is a
case-insensitive string of 1 to 80 characters. Valid characters include numerals, English letters, wildcards
caret (^), dollar sign ($), ampersand (&), and asterisk (*), and other ASCII characters with values in the
range of 31 to 127. A filtering entry can be a string with spaces, but such an entry must be present in
quotes, for example, "select all". One space in a filtering keyword can match multiple consecutive
spaces in a URL parameter of an HTTP request. For meanings of the wildcards, see Table 12.
Table 12 Meanings
of wildcards
Wildcard Meanin
g
Usa
g
e
g
uidelines
^
Matches parameters starting with
the keyword
It can be present once at the beginning of a filtering entry.
$
Matches parameters ending with
the keyword
It can be present once at the end of a filtering entry.
& Stands for one valid character
It can be present multiple times at any position of a filtering
entry, consecutively or inconsecutively, and cannot be used
next to an asterisk (*). If it is present at the beginning or end
of a filtering entry, it must be next to a caret (^) or a dollar
sign ($).
*
Stands for up to 4 valid
characters including spaces
It can be present once in the middle of a filtering entry.
When using the wildcards, also follow the principles below:
• A filtering entry with a caret (^) at the beginning or a dollar sign ($) at the end indicates an exact
match. For example, filtering entry ^webfilter$ matches website addresses containing standalone
webfilter, like www.abc.com/webfilter any; it does not match website addresses like
www.abc.com/webfilterany.
• A filtering entry with neither a caret (^) at the beginning nor a dollar sign ($) at the end indicates
a fuzzy match, and matches website addresses containing the keyword.