Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SQL injection protection - enable turn off #95

Merged
merged 2 commits into from
Nov 7, 2024

Conversation

Jarek-Rolski
Copy link
Contributor

I wrapped up sql injection statement into dynamic block.
The block can be turned off with variable from main rapid module.

@@ -59,3 +59,9 @@ variable "geo_restriction_locations" {
type = list(string)
default = ["GB"]
}

variable "sql_injection_protection" {
description = "Wheather to add SQL injection protection to WAF."
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Spelling issue + would you be okay adding a bit of text to flag that this disables some rules in the WAF that add protection to the overall application. Ok with this is in principle, just want users to be aware of the risks.

@Jarek-Rolski Jarek-Rolski requested a review from MotwaniM July 24, 2024 09:02
@MotwaniM
Copy link
Contributor

Looks good! We'll merge it as part of our next release

@MotwaniM MotwaniM changed the base branch from main to release/7.12.0 October 30, 2024 11:20
@MotwaniM MotwaniM merged commit f0bf895 into no10ds:release/7.12.0 Nov 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants