Request Header and CSRF Token Presence

Exact Host Match (optional)

Leave blank to match all hosts

Path Match

Prefix

Pattern

Skip Paths

Methods Enforced

POST

PUT

PATCH

DELETE

Header Name

Parameter Name

Require

Header or Parameter

Header Only

Parameter Only

Parameter Locations

Query String

Form Body (application/x-www-form-urlencoded)

Max Body Inspect Bytes

Mode

Presence Only

Format Validation

Min Length

Max Length

Pattern (Regex)

Only enabled for Format Validation mode

Status Code

Response Body

Response Header Name

Policy: