| bindappfwprofile_crosssitescripting |
Use this method to bind crosssitescripting to appfw profile. |
Syntax |
Parameters |
name |
Name of the profile to which to bind an exemption or rule. This is mandatory parameter. |
crosssitescripting |
Exempt the specified string, found in the specified HTTP header, cookie, url or web form, from the cross-site scripting check.
A cross-site scripting check exemption (relaxation) consists of the following items:
* HTML to exempt. The string to exempt from the cross-site scripting check.
* URL. The URL to exempt.
* IsRegex flag. The IsRegex flag, followed by YES if the URL is a regular expression, or NO if it is a literal string.
* location. Location which should be examined by the cross-site scripting check, either FORMFIELD for web form field, HEADER for HTTP header, COOKIE for cookie, or URL for complete url |
formactionurl |
Form action URL for exceptions in fields, or request URL for exceptions in headers, cookies or url. |
isregex |
Is a regular expression? Possible Values : REGEX, NOTREGEX. |
location |
Location of cross-site scripting exception - form field, header, cookie or URL. Possible Values : FORMFIELD, HEADER, COOKIE, URL. |
valuetype |
XSS value type. (Tag | Attribute | Pattern) Possible Values : Tag, Attribute, Pattern. |
valueexpression |
XSS value expressions consistituting expressions for Tag, Attribute and Pattern. |
isvalueregex |
Is a regular expression? Possible Values : REGEX, NOTREGEX. |
Return Value |
Returns simpleResult |
See Also |