AltocumulusRegex issue
Hello,
I am stuck on trying to find out how to match some parameters in a WAF request using regex wildcard
The parameters that I want to match are int the form of amp;arg20=something where the arg20 can be anything.
The repetitive part that I want to match with the regex is amp; and I want to match multiple times because it appears multiple times in the query string
This is the request
GET /human.aspx?r=2900376326&arg20=dssdds&arg21=aaa HTTP/1.1
I want to match the 2 parameters amp;arg20 and amp;arg21 with a wildcard which appears as invalid parameters
| Parameter Location | Query String |
| Parameter Name | amp;arg20 |
| Parameter Value | dssdds |
| Applied Blocking Settings | Block Alarm Learn |
| Parameter Location | Query String |
| Parameter Name | amp;arg21 |
| Parameter Value | aaa |
| Applied Blocking Settings | Block Alarm Learn |
I tried to create multiple wildcard parameters like: amp.* or amp.+?(?==) but the parameters never match and I get the illegal parameter violation
How can this be achieved?
I somehow got it to work with this solution (not sure why it wasn't working before)
amp;[a-zA-Z0-9]*
