AWS waf medium security documentation change
Summary
Added a new rule description for 'PHPHighRiskMethodsVariables_URIPATH' which inspects request paths for PHP script code injection attempts.
Security assessment
This change documents a new security rule designed to block PHP script code injection attempts (e.g., using functions like fsockopen and $_GET variable). It directly addresses a security vulnerability (code injection) by adding a protective WAF rule.
Diff
diff --git a/waf/latest/developerguide/aws-managed-rule-groups-use-case.md b/waf/latest/developerguide/aws-managed-rule-groups-use-case.md index 7660d11f1..9a9e257c5 100644 --- a//waf/latest/developerguide/aws-managed-rule-groups-use-case.md +++ b//waf/latest/developerguide/aws-managed-rule-groups-use-case.md @@ -165,0 +166 @@ This rule only inspects the request body up to the body size limit for the prote +`PHPHighRiskMethodsVariables_URIPATH` | Inspects the request path for PHP script code injection attempts. Example patterns include functions like `fsockopen` and the `$_GET` superglobal variable. Rule action: Block Label: `awswaf:managed:aws:php-app:PHPHighRiskMethodsVariables_URIPath`