Ref:
- Cloud Armor Preconfigured WAF Rules Codelab
https://codelabs.developers.google.com/codelabs/cloudnet-ca-waf-rules#0 - Google Cloud Armor custom rules language reference
https://cloud.google.com/armor/docs/rules-language-reference - Tuning Google Cloud Armor WAF rules
https://cloud.google.com/armor/docs/rule-tuning
php-stable
evaluatePreconfiguredExpr('php-stable',
['owasp-crs-v030001-id933151-php',
'owasp-crs-v030001-id933131-php',
'owasp-crs-v030001-id933161-php',
'owasp-crs-v030001-id933111-php'])
|| evaluatePreconfiguredExpr('sessionfixation-canary')
|| evaluatePreconfiguredExpr('cve-canary',
['owasp-crs-v030001-id244228-cve',
'owasp-crs-v030001-id344228-cve'])
lfi/rce/rfi/methodenforcement/scannerdetection
evaluatePreconfiguredExpr('lfi-canary',
['owasp-crs-v030001-id930100-lfi','owasp-crs-v030001-id930110-lfi'])
|| evaluatePreconfiguredExpr('rce-canary',
['owasp-crs-v030001-id932130-rce'])
|| evaluatePreconfiguredExpr('rfi-canary',
['owasp-crs-v030001-id931130-rfi'])
|| evaluatePreconfiguredExpr('methodenforcement-canary')
|| evaluatePreconfiguredExpr('scannerdetection-stable',
['owasp-crs-v030001-id913101-scannerdetection',
'owasp-crs-v030001-id913102-scannerdetection'])
sqli/xss
evaluatePreconfiguredExpr('sqli-stable',
[ 'owasp-crs-v030001-id942110-sqli',
'owasp-crs-v030001-id942120-sqli',
'owasp-crs-v030001-id942150-sqli',
'owasp-crs-v030001-id942180-sqli',
'owasp-crs-v030001-id942200-sqli',
'owasp-crs-v030001-id942210-sqli',
'owasp-crs-v030001-id942260-sqli',
'owasp-crs-v030001-id942300-sqli',
'owasp-crs-v030001-id942310-sqli',
'owasp-crs-v030001-id942330-sqli',
'owasp-crs-v030001-id942340-sqli',
'owasp-crs-v030001-id942380-sqli',
'owasp-crs-v030001-id942390-sqli',
'owasp-crs-v030001-id942400-sqli',
'owasp-crs-v030001-id942410-sqli',
'owasp-crs-v030001-id942430-sqli',
'owasp-crs-v030001-id942440-sqli',
'owasp-crs-v030001-id942450-sqli',
'owasp-crs-v030001-id942251-sqli',
'owasp-crs-v030001-id942420-sqli',
'owasp-crs-v030001-id942431-sqli',
'owasp-crs-v030001-id942460-sqli',
'owasp-crs-v030001-id942421-sqli',
'owasp-crs-v030001-id942432-sqli',
'owasp-crs-v030001-id942160-sqli',
'owasp-crs-v030001-id942190-sqli',
'owasp-crs-v030001-id942280-sqli',
'owasp-crs-v030001-id942290-sqli',
'owasp-crs-v030001-id942360-sqli' ])
||
evaluatePreconfiguredExpr('xss-stable',
['owasp-crs-v030001-id941150-xss',
'owasp-crs-v030001-id941320-xss',
'owasp-crs-v030001-id941330-xss',
'owasp-crs-v030001-id941340-xss'])
