amazonka-waf-2.0: gen/Amazonka/WAF/Types/SqlInjectionMatchTuple.hs
{-# LANGUAGE DeriveGeneric #-}
{-# LANGUAGE DuplicateRecordFields #-}
{-# LANGUAGE NamedFieldPuns #-}
{-# LANGUAGE OverloadedStrings #-}
{-# LANGUAGE RecordWildCards #-}
{-# LANGUAGE StrictData #-}
{-# LANGUAGE NoImplicitPrelude #-}
{-# OPTIONS_GHC -fno-warn-unused-imports #-}
{-# OPTIONS_GHC -fno-warn-unused-matches #-}
-- Derived from AWS service descriptions, licensed under Apache 2.0.
-- |
-- Module : Amazonka.WAF.Types.SqlInjectionMatchTuple
-- Copyright : (c) 2013-2023 Brendan Hay
-- License : Mozilla Public License, v. 2.0.
-- Maintainer : Brendan Hay
-- Stability : auto-generated
-- Portability : non-portable (GHC extensions)
module Amazonka.WAF.Types.SqlInjectionMatchTuple where
import qualified Amazonka.Core as Core
import qualified Amazonka.Core.Lens.Internal as Lens
import qualified Amazonka.Data as Data
import qualified Amazonka.Prelude as Prelude
import Amazonka.WAF.Types.FieldToMatch
import Amazonka.WAF.Types.TextTransformation
-- | This is __AWS WAF Classic__ documentation. For more information, see
-- <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html AWS WAF Classic>
-- in the developer guide.
--
-- __For the latest version of AWS WAF__, use the AWS WAFV2 API and see the
-- <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html AWS WAF Developer Guide>.
-- With the latest version, AWS WAF has a single set of endpoints for
-- regional and global use.
--
-- Specifies the part of a web request that you want AWS WAF to inspect for
-- snippets of malicious SQL code and, if you want AWS WAF to inspect a
-- header, the name of the header.
--
-- /See:/ 'newSqlInjectionMatchTuple' smart constructor.
data SqlInjectionMatchTuple = SqlInjectionMatchTuple'
{ -- | Specifies where in a web request to look for snippets of malicious SQL
-- code.
fieldToMatch :: FieldToMatch,
-- | Text transformations eliminate some of the unusual formatting that
-- attackers use in web requests in an effort to bypass AWS WAF. If you
-- specify a transformation, AWS WAF performs the transformation on
-- @FieldToMatch@ before inspecting it for a match.
--
-- You can only specify a single type of TextTransformation.
--
-- __CMD_LINE__
--
-- When you\'re concerned that attackers are injecting an operating system
-- command line command and using unusual formatting to disguise some or
-- all of the command, use this option to perform the following
-- transformations:
--
-- - Delete the following characters: \\ \" \' ^
--
-- - Delete spaces before the following characters: \/ (
--
-- - Replace the following characters with a space: , ;
--
-- - Replace multiple spaces with one space
--
-- - Convert uppercase letters (A-Z) to lowercase (a-z)
--
-- __COMPRESS_WHITE_SPACE__
--
-- Use this option to replace the following characters with a space
-- character (decimal 32):
--
-- - \\f, formfeed, decimal 12
--
-- - \\t, tab, decimal 9
--
-- - \\n, newline, decimal 10
--
-- - \\r, carriage return, decimal 13
--
-- - \\v, vertical tab, decimal 11
--
-- - non-breaking space, decimal 160
--
-- @COMPRESS_WHITE_SPACE@ also replaces multiple spaces with one space.
--
-- __HTML_ENTITY_DECODE__
--
-- Use this option to replace HTML-encoded characters with unencoded
-- characters. @HTML_ENTITY_DECODE@ performs the following operations:
--
-- - Replaces @(ampersand)quot;@ with @\"@
--
-- - Replaces @(ampersand)nbsp;@ with a non-breaking space, decimal 160
--
-- - Replaces @(ampersand)lt;@ with a \"less than\" symbol
--
-- - Replaces @(ampersand)gt;@ with @>@
--
-- - Replaces characters that are represented in hexadecimal format,
-- @(ampersand)#xhhhh;@, with the corresponding characters
--
-- - Replaces characters that are represented in decimal format,
-- @(ampersand)#nnnn;@, with the corresponding characters
--
-- __LOWERCASE__
--
-- Use this option to convert uppercase letters (A-Z) to lowercase (a-z).
--
-- __URL_DECODE__
--
-- Use this option to decode a URL-encoded value.
--
-- __NONE__
--
-- Specify @NONE@ if you don\'t want to perform any text transformations.
textTransformation :: TextTransformation
}
deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)
-- |
-- Create a value of 'SqlInjectionMatchTuple' with all optional fields omitted.
--
-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.
--
-- The following record fields are available, with the corresponding lenses provided
-- for backwards compatibility:
--
-- 'fieldToMatch', 'sqlInjectionMatchTuple_fieldToMatch' - Specifies where in a web request to look for snippets of malicious SQL
-- code.
--
-- 'textTransformation', 'sqlInjectionMatchTuple_textTransformation' - Text transformations eliminate some of the unusual formatting that
-- attackers use in web requests in an effort to bypass AWS WAF. If you
-- specify a transformation, AWS WAF performs the transformation on
-- @FieldToMatch@ before inspecting it for a match.
--
-- You can only specify a single type of TextTransformation.
--
-- __CMD_LINE__
--
-- When you\'re concerned that attackers are injecting an operating system
-- command line command and using unusual formatting to disguise some or
-- all of the command, use this option to perform the following
-- transformations:
--
-- - Delete the following characters: \\ \" \' ^
--
-- - Delete spaces before the following characters: \/ (
--
-- - Replace the following characters with a space: , ;
--
-- - Replace multiple spaces with one space
--
-- - Convert uppercase letters (A-Z) to lowercase (a-z)
--
-- __COMPRESS_WHITE_SPACE__
--
-- Use this option to replace the following characters with a space
-- character (decimal 32):
--
-- - \\f, formfeed, decimal 12
--
-- - \\t, tab, decimal 9
--
-- - \\n, newline, decimal 10
--
-- - \\r, carriage return, decimal 13
--
-- - \\v, vertical tab, decimal 11
--
-- - non-breaking space, decimal 160
--
-- @COMPRESS_WHITE_SPACE@ also replaces multiple spaces with one space.
--
-- __HTML_ENTITY_DECODE__
--
-- Use this option to replace HTML-encoded characters with unencoded
-- characters. @HTML_ENTITY_DECODE@ performs the following operations:
--
-- - Replaces @(ampersand)quot;@ with @\"@
--
-- - Replaces @(ampersand)nbsp;@ with a non-breaking space, decimal 160
--
-- - Replaces @(ampersand)lt;@ with a \"less than\" symbol
--
-- - Replaces @(ampersand)gt;@ with @>@
--
-- - Replaces characters that are represented in hexadecimal format,
-- @(ampersand)#xhhhh;@, with the corresponding characters
--
-- - Replaces characters that are represented in decimal format,
-- @(ampersand)#nnnn;@, with the corresponding characters
--
-- __LOWERCASE__
--
-- Use this option to convert uppercase letters (A-Z) to lowercase (a-z).
--
-- __URL_DECODE__
--
-- Use this option to decode a URL-encoded value.
--
-- __NONE__
--
-- Specify @NONE@ if you don\'t want to perform any text transformations.
newSqlInjectionMatchTuple ::
-- | 'fieldToMatch'
FieldToMatch ->
-- | 'textTransformation'
TextTransformation ->
SqlInjectionMatchTuple
newSqlInjectionMatchTuple
pFieldToMatch_
pTextTransformation_ =
SqlInjectionMatchTuple'
{ fieldToMatch =
pFieldToMatch_,
textTransformation = pTextTransformation_
}
-- | Specifies where in a web request to look for snippets of malicious SQL
-- code.
sqlInjectionMatchTuple_fieldToMatch :: Lens.Lens' SqlInjectionMatchTuple FieldToMatch
sqlInjectionMatchTuple_fieldToMatch = Lens.lens (\SqlInjectionMatchTuple' {fieldToMatch} -> fieldToMatch) (\s@SqlInjectionMatchTuple' {} a -> s {fieldToMatch = a} :: SqlInjectionMatchTuple)
-- | Text transformations eliminate some of the unusual formatting that
-- attackers use in web requests in an effort to bypass AWS WAF. If you
-- specify a transformation, AWS WAF performs the transformation on
-- @FieldToMatch@ before inspecting it for a match.
--
-- You can only specify a single type of TextTransformation.
--
-- __CMD_LINE__
--
-- When you\'re concerned that attackers are injecting an operating system
-- command line command and using unusual formatting to disguise some or
-- all of the command, use this option to perform the following
-- transformations:
--
-- - Delete the following characters: \\ \" \' ^
--
-- - Delete spaces before the following characters: \/ (
--
-- - Replace the following characters with a space: , ;
--
-- - Replace multiple spaces with one space
--
-- - Convert uppercase letters (A-Z) to lowercase (a-z)
--
-- __COMPRESS_WHITE_SPACE__
--
-- Use this option to replace the following characters with a space
-- character (decimal 32):
--
-- - \\f, formfeed, decimal 12
--
-- - \\t, tab, decimal 9
--
-- - \\n, newline, decimal 10
--
-- - \\r, carriage return, decimal 13
--
-- - \\v, vertical tab, decimal 11
--
-- - non-breaking space, decimal 160
--
-- @COMPRESS_WHITE_SPACE@ also replaces multiple spaces with one space.
--
-- __HTML_ENTITY_DECODE__
--
-- Use this option to replace HTML-encoded characters with unencoded
-- characters. @HTML_ENTITY_DECODE@ performs the following operations:
--
-- - Replaces @(ampersand)quot;@ with @\"@
--
-- - Replaces @(ampersand)nbsp;@ with a non-breaking space, decimal 160
--
-- - Replaces @(ampersand)lt;@ with a \"less than\" symbol
--
-- - Replaces @(ampersand)gt;@ with @>@
--
-- - Replaces characters that are represented in hexadecimal format,
-- @(ampersand)#xhhhh;@, with the corresponding characters
--
-- - Replaces characters that are represented in decimal format,
-- @(ampersand)#nnnn;@, with the corresponding characters
--
-- __LOWERCASE__
--
-- Use this option to convert uppercase letters (A-Z) to lowercase (a-z).
--
-- __URL_DECODE__
--
-- Use this option to decode a URL-encoded value.
--
-- __NONE__
--
-- Specify @NONE@ if you don\'t want to perform any text transformations.
sqlInjectionMatchTuple_textTransformation :: Lens.Lens' SqlInjectionMatchTuple TextTransformation
sqlInjectionMatchTuple_textTransformation = Lens.lens (\SqlInjectionMatchTuple' {textTransformation} -> textTransformation) (\s@SqlInjectionMatchTuple' {} a -> s {textTransformation = a} :: SqlInjectionMatchTuple)
instance Data.FromJSON SqlInjectionMatchTuple where
parseJSON =
Data.withObject
"SqlInjectionMatchTuple"
( \x ->
SqlInjectionMatchTuple'
Prelude.<$> (x Data..: "FieldToMatch")
Prelude.<*> (x Data..: "TextTransformation")
)
instance Prelude.Hashable SqlInjectionMatchTuple where
hashWithSalt _salt SqlInjectionMatchTuple' {..} =
_salt
`Prelude.hashWithSalt` fieldToMatch
`Prelude.hashWithSalt` textTransformation
instance Prelude.NFData SqlInjectionMatchTuple where
rnf SqlInjectionMatchTuple' {..} =
Prelude.rnf fieldToMatch
`Prelude.seq` Prelude.rnf textTransformation
instance Data.ToJSON SqlInjectionMatchTuple where
toJSON SqlInjectionMatchTuple' {..} =
Data.object
( Prelude.catMaybes
[ Prelude.Just ("FieldToMatch" Data..= fieldToMatch),
Prelude.Just
("TextTransformation" Data..= textTransformation)
]
)