Forum Discussion

jussihar's avatar
jussihar
Icon for Nimbostratus rankNimbostratus
Sep 18, 2018

Data Guard and websocket

How to use data guard in websocket, for example to mask credit card number? Websocket profile is enabled and also data guard.  
ASM Advanced WAF
security
rob_carr's avatar
rob_carr
Icon for Cirrostratus rankCirrostratus
Sep 18, 2018

I'm no expert on the websocket protocol, but based on some quick research, websocket doesn't appear to use the HTTP Content-Type header, and the Data Guard feature only checks content with the content-type values listed here:

"text/..."
"application/x-shockwave-flash"
"application/sgml"
"application/x-javascript"
"application/xml"
"application/x-asp"
"application/x-aspx"
"application/xhtml+xml"