pw platform firewall exclusions create
pw platform firewall exclusions create
Remove a CRS rule, or a tag's rules for one field, from a route
pw platform firewall exclusions create [--path route] [--method m]... (--rule-id id | --tag tag --target field) [--note text] [--for duration] [flags]Examples
pw platform firewall exclusions create --path /api/organizations/{organization}/scripts --method PUT --tag attack-rce --target ARGS:json.script
# One CRS rule misreads a query parameter, for a week while a fix ships
pw platform firewall exclusions create --path /api/users --rule-id 932260 --target ARGS:sortBy --for 168hOptions
--for duration How long it applies, such as 168h; absent applies until deleted
-h, --help help for create
--method strings HTTP method it applies to; repeat for more. Absent applies to every method
--note string Why it is needed
--path string Route, such as /api/users/{user}; {param} is one path segment and a trailing /* covers every path below. Absent applies to every route
--rule-id int CRS rule to remove, as a block log's rule_ids names it
--tag string CRS tag whose rules to remove, such as attack-xss; needs --target
--target string Request field to limit the removal to, such as ARGS:json.nameOptions inherited from parent commands
--context string The context to use. Overrides PW_CONTEXT environment variable and current context from config.
--platform-host string The Parallel Works ACTIVATE platform host to use. Overrides PW_PLATFORM_HOST environment variable and the current context's server.
-v, --verbose Enable verbose loggingSEE ALSO
- pw platform firewall exclusions - Manage CRS rules removed from routes, to stop false positives