cds-snc / notification-planning-core

Project planning for GC Notify Core Team

0 stars 0 forks source link

Figure out how to add more patterns to the WAF rules #115

Open sastels opened 1 year ago

sastels commented 1 year ago

Description

As a developer, I need to be able to add new endpoints to the WAF rules

WHY are we building?

Our WAF filters by endpoint so we need to add all valid endpoints to it. We are getting close to AWS limits (currently 1849 out of 2000 characters)

WHAT are we building?

Figure out a way to continue filtering on endpoints

VALUE created by our solution

This WAF filter helps reject fuzzing attacks on our systems.

Acceptance Criteria

Given some context, when (X) action occurs, then (Y) outcome is achieved.

[ ] The WAF can filter based on endpoints past this 2000 character limit

QA Steps

[ ] add lots of fake endpoints to the WAF and check the WAF doesn't block them.