Actions
Feature #5044
openrules: keyword for "count" of http_header_names
Effort:
Difficulty:
Label:
Description
I've recently written a few "terse requests" style which leverage the http.header_names buffer to ensure there are very few headers. To accomplish this I often find myself negating specific headers to ensure there are only a few of them in the request. However, I believe the ability to "count" the number of headers would be a better solution. Every other solution I was able to think of has it's own disadvantages.
http.header_names; count:<3;
I'm not sure if any other keywords would benefit from such logic.
Updated by Victor Julien over 3 years ago
- Subject changed from keyword for "count" of http_header_names to rules: keyword for "count" of http_header_names
Updated by Philippe Antoine 6 months ago
- Related to Feature #7211: detect/integers: support a count argument for array of integers added
Actions