Skip to content

Commit

Permalink
Update exposed-credentials-check.mdx
Browse files Browse the repository at this point in the history
  • Loading branch information
zeinjaber authored Oct 30, 2024
1 parent 4c18a4a commit 21fef71
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ Additionally, this managed ruleset also includes generic rules for other common
- Check credentials sent as JSON with `email` and `password` keys
- Check credentials sent as JSON with `username` and `password` keys

The default action for the rules in managed ruleset is _Exposed-Credential-Check Header_ (named `rewrite` in the API).
The default action for the rules in managed ruleset is _Exposed-Credential-Check Header_ (named `rewrite` in the API and the Security Events).

The managed ruleset also contains a rule that blocks HTTP requests already containing the `Exposed-Credential-Check` HTTP header used by the _Exposed-Credential-Check Header_ action. These requests could be used to trick the origin into believing that a request contained (or did not contain) exposed credentials.

Expand Down

0 comments on commit 21fef71

Please sign in to comment.