DataDog/libddwaf

Dictionary keys are not analyzed

robertpi opened this issue · 2 comments

I think they should be.

Scanning keys on every single rule and address would result in an increase in false positives. The preferred option is for the ruleset to provide a virtual address or per-address settings to determine if the keys should be analysed. Until this is provided by the ruleset this issue is unactionable.

This was provided with the keys_only transformer.