{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/azion/main/json-schema/azion-patched-wafrule-request-schema.json",
  "title": "PatchedWAFRuleRequest",
  "x-generated": "2026-10-20",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/_original/azion-api-openapi.json#/components/schemas/PatchedWAFRuleRequest",
  "type": "object",
  "properties": {
    "rule_id": {
      "allOf": [
        {
          "$ref": "#/$defs/RuleIdEnum"
        }
      ],
      "default": 0,
      "description": "0 - All Rules<br>\n1 - Validation of protocol compliance: weird request, unable to parse<br>\n2 - Request too big, stored on disk and not parsed<br>\n10 - Validation of protocol compliance: invalid HEX encoding (null bytes)<br>\n11 - Validation of protocol compliance: missing or unknown Content-Type header in a POST (this rule applies only to Request Body match zone)<br>\n12 - Validation of protocol compliance: invalid formatted URL<br>\n13 - Validation of protocol compliance: invalid POST format<br>\n14 - Validation of protocol compliance: invalid POST boundary<br>\n15 - Validation of protocol compliance: invalid JSON<br>\n16 - Validation of protocol compliance: POST with no body<br>\n17 - Possible SQL Injection attack: validation with libinjection_sql<br>\n18 - Possible XSS attack: validation with libinjection_xss<br>\n1000 - Possible SQL Injection attack: SQL keywords found in Body, Path, Query String or Cookies<br>\n1001 - Possible SQL Injection or XSS attack: double quote (\") found in Body, Path, Query String or Cookies<br>\n1002 - Possible SQL Injection attack: possible hex encoding (0x) found in Body, Path, Query String or Cookies<br>\n1003 - Possible SQL Injection attack: MySQL comment (/*) found in Body, Path, Query String or Cookies<br>\n1004 - Possible SQL Injection attack: MySQL comment (*​/) found in Body, Path, Query String or Cookies<br>\n1005 - Possible SQL Injection attack: MySQL keyword (|) found in Body, Path, Query String or Cookies<br>\n1006 - Possible SQL Injection attack: MySQL keyword (&&) found in Body, Path, Query String or Cookies<br>\n1007 - Possible SQL Injection attack: MySQL comment (--) found in Body, Path, Query String or Cookies<br>\n1008 - Possible SQL Injection or XSS attack: semicolon (;) found in Body, Path or Query String<br>\n1009 - Possible SQL Injection attack: equal sign (=) found in Body or Query String<br>\n1010 - Possible SQL Injection or XSS attack: open parenthesis [(] found in Body, Path, Query String or Cookies<br>\n1011 - Possible SQL Injection or XSS attack: close parenthesis [)] found in Body, Path, Query String or Cookies<br>\n1013 - Possible SQL Injection or XSS attack: apostrophe (') found in Body, Path, Query String or Cookies<br>\n1015 - Possible SQL Injection attack: comma (,) found in Body, Path, Query String or Cookies<br>\n1016 - Possible SQL Injection attack: MySQL comment (#) found in Body, Path, Query String or Cookies<br>\n1017 - Possible SQL Injection attack: double at sign (@@) found in Body, Path, Query String or Cookies<br>\n1100 - Possible RFI attack: scheme \"http://\" found in Body, Query String or Cookies<br>\n1101 - Possible RFI attack: scheme \"https://\" found in Body, Query String or Cookies<br>\n1102 - Possible RFI attack: scheme \"ftp://\" found in Body, Query String or Cookies<br>\n1103 - Possible RFI attack: scheme \"php://\" found in Body, Query String or Cookies<br>\n1104 - Possible RFI attack: scheme \"sftp://\" found in Body, Query String or Cookies<br>\n1105 - Possible RFI attack: scheme \"zlib://\" found in Body, Query String or Cookies<br>\n1106 - Possible RFI attack: scheme \"data://\" found in Body, Query String or Cookies<br>\n1107 - Possible RFI attack: scheme \"glob://\" found in Body, Query String or Cookies<br>\n1108 - Possible RFI attack: scheme \"phar://\" found in Body, Query String or Cookies<br>\n1109 - Possible RFI attack: scheme \"file://\" found in Body, Query String or Cookies<br>\n1110 - Possible RFI attack: scheme \"gopher://\" found in Body, Query String or Cookies<br>\n1198 - Possible RCE attack: validation with log4j (Log4Shell) in HEADERS_VAR<br>\n1199 - Possible RCE attack: validation with log4j (Log4Shell) in Body, Path, Query String, Headers or Cookies<br>\n1200 - Possible Directory Traversal attack: double dot (..) found in Body, Path, Query String or Cookies<br>\n1202 - Possible Directory Traversal attack: obvious probe (/etc/passwd) found in Body, Path, Query String or Cookies<br>\n1203 - Possible Directory Traversal attack: obvious windows path (c:\\) found in Body, Path, Query String or Cookies<br>\n1204 - Possible Directory Traversal attack: obvious probe (cmd.exe) found in Body, Path, Query String or Cookies<br>\n1205 - Possible Directory Traversal attack: backslash (\\) found in Body, Path, Query String or Cookies<br>\n1206 - Possible Directory Traversal attack: slash (/) found in Body, Query String or Cookies<br>\n1207 - Possible Directory Traversal attack: obvious path probe (/..;/) found in Body, Query String or Cookies<br>\n1208 - Possible Directory Traversal attack: obvious path probe (/.;/) found in Body, Query String or Cookies<br>\n1209 - Possible Directory Traversal attack: obvious path probe (/.%2e/) found in Body, Query String or Cookies<br>\n1210 - Possible Directory Traversal attack: obvious path probe (/%2e./) found in Body, Query String or Cookies<br>\n1302 - Possible XSS attack: html open tag (<) found in Body, Path, Query String or Cookies<br>\n1303 - Possible XSS attack: html close tag (>) found in Body, Path, Query String or Cookies<br>\n1310 - Possible XSS attack: open square bracket ([) found in Body, Path, Query String or Cookies<br>\n1311 - Possible XSS attack: close square bracket (]) found in Body, Path, Query String or Cookies<br>\n1312 - Possible XSS attack: tilde character (~) found in Body, Path, Query String or Cookies<br>\n1314 - Possible XSS attack: back quote ( `) found in Body, Path, Query String or Cookies<br>\n1315 - Possible XSS attack: double encoding (%[2|3]) found in Body, Path, Query String or Cookies<br>\n1400 - Possible trick to evade protection: UTF7/8 encoding (&#) found in Body, Path, Query String or Cookies<br>\n1401 - Possible trick to evade protection: MS encoding (%U) found in Body, Path, Query String or Cookies<br>\n1402 - Possible trick to evade protection: encoded chars (%20-%3F) found in Body, Query String or Cookies<br>\n1500 - Possible File Upload attempt: asp/php (.ph, .asp or .ht) found in filename in a multipart POST containing a file<br>\n2001 - Possible CVE-2022-22965 attack: Tomcat Pipeline Context tampering\n\n* `0` - All Rules\n* `1` - Validation of protocol compliance: weird request, unable to parse\n* `2` - Request too big, stored on disk and not parsed\n* `10` - Validation of protocol compliance: invalid HEX encoding (null bytes)\n* `11` - Validation of protocol compliance: missing or unknown Content-Type header in a POST (this rule applies only to Request Body match zone)\n* `12` - Validation of protocol compliance: invalid formatted URL\n* `13` - Validation of protocol compliance: invalid POST format\n* `14` - Validation of protocol compliance: invalid POST boundary\n* `15` - Validation of protocol compliance: invalid JSON\n* `16` - Validation of protocol compliance: POST with no body\n* `17` - Possible SQL Injection attack: validation with libinjection_sql\n* `18` - Possible XSS attack: validation with libinjection_xss\n* `1000` - Possible SQL Injection attack: SQL keywords found in Body, Path, Query String or Cookies\n* `1001` - Possible SQL Injection or XSS attack: double quote (\") found in Body, Path, Query String or Cookies\n* `1002` - Possible SQL Injection attack: possible hex encoding (0x) found in Body, Path, Query String or Cookies\n* `1003` - Possible SQL Injection attack: MySQL comment (/*) found in Body, Path, Query String or Cookies\n* `1004` - Possible SQL Injection attack: MySQL comment (*​/) found in Body, Path, Query String or Cookies\n* `1005` - Possible SQL Injection attack: MySQL keyword (|) found in Body, Path, Query String or Cookies\n* `1006` - Possible SQL Injection attack: MySQL keyword (&&) found in Body, Path, Query String or Cookies\n* `1007` - Possible SQL Injection attack: MySQL comment (--) found in Body, Path, Query String or Cookies\n* `1008` - Possible SQL Injection or XSS attack: semicolon (;) found in Body, Path or Query String\n* `1009` - Possible SQL Injection attack: equal sign (=) found in Body or Query String\n* `1010` - Possible SQL Injection or XSS attack: open parenthesis [(] found in Body, Path, Query String or Cookies\n* `1011` - Possible SQL Injection or XSS attack: close parenthesis [)] found in Body, Path, Query String or Cookies\n* `1013` - Possible SQL Injection or XSS attack: apostrophe (') found in Body, Path, Query String or Cookies\n* `1015` - Possible SQL Injection attack: comma (,) found in Body, Path, Query String or Cookies\n* `1016` - Possible SQL Injection attack: MySQL comment (#) found in Body, Path, Query String or Cookies\n* `1017` - Possible SQL Injection attack: double at sign (@@) found in Body, Path, Query String or Cookies\n* `1100` - Possible RFI attack: scheme \"http://\" found in Body, Query String or Cookies\n* `1101` - Possible RFI attack: scheme \"https://\" found in Body, Query String or Cookies\n* `1102` - Possible RFI attack: scheme \"ftp://\" found in Body, Query String or Cookies\n* `1103` - Possible RFI attack: scheme \"php://\" found in Body, Query String or Cookies\n* `1104` - Possible RFI attack: scheme \"sftp://\" found in Body, Query String or Cookies\n* `1105` - Possible RFI attack: scheme \"zlib://\" found in Body, Query String or Cookies\n* `1106` - Possible RFI attack: scheme \"data://\" found in Body, Query String or Cookies\n* `1107` - Possible RFI attack: scheme \"glob://\" found in Body, Query String or Cookies\n* `1108` - Possible RFI attack: scheme \"phar://\" found in Body, Query String or Cookies\n* `1109` - Possible RFI attack: scheme \"file://\" found in Body, Query String or Cookies\n* `1110` - Possible RFI attack: scheme \"gopher://\" found in Body, Query String or Cookies\n* `1198` - Possible RCE attack: validation with log4j (Log4Shell) in HEADERS_VAR\n* `1199` - Possible RCE attack: validation with log4j (Log4Shell) in Body, Path, Query String, Headers or Cookies\n* `1200` - Possible Directory Traversal attack: double dot (..) found in Body, Path, Query String or Cookies\n* `1202` - Possible Directory Traversal attack: obvious probe (/etc/passwd) found in Body, Path, Query String or Cookies\n* `1203` - Possible Directory Traversal attack: obvious windows path (c:\\) found in Body, Path, Query String or Cookies\n* `1204` - Possible Directory Traversal attack: obvious probe (cmd.exe) found in Body, Path, Query String or Cookies\n* `1205` - Possible Directory Traversal attack: backslash (\\) found in Body, Path, Query String or Cookies\n* `1206` - Possible Directory Traversal attack: slash (/) found in Body, Query String or Cookies\n* `1207` - Possible Directory Traversal attack: obvious path probe (/..;/) found in Body, Query String or Cookies\n* `1208` - Possible Directory Traversal attack: obvious path probe (/.;/) found in Body, Query String or Cookies\n* `1209` - Possible Directory Traversal attack: obvious path probe (/.%2e/) found in Body, Query String or Cookies\n* `1210` - Possible Directory Traversal attack: obvious path probe (/%2e./) found in Body, Query String or Cookies\n* `1302` - Possible XSS attack: html open tag (<) found in Body, Path, Query String or Cookies\n* `1303` - Possible XSS attack: html close tag (>) found in Body, Path, Query String or Cookies\n* `1310` - Possible XSS attack: open square bracket ([) found in Body, Path, Query String or Cookies\n* `1311` - Possible XSS attack: close square bracket (]) found in Body, Path, Query String or Cookies\n* `1312` - Possible XSS attack: tilde character (~) found in Body, Path, Query String or Cookies\n* `1314` - Possible XSS attack: back quote ( `) found in Body, Path, Query String or Cookies\n* `1315` - Possible XSS attack: double encoding (%[2|3]) found in Body, Path, Query String or Cookies\n* `1400` - Possible trick to evade protection: UTF7/8 encoding (&#) found in Body, Path, Query String or Cookies\n* `1401` - Possible trick to evade protection: MS encoding (%U) found in Body, Path, Query String or Cookies\n* `1402` - Possible trick to evade protection: encoded chars (%20-%3F) found in Body, Query String or Cookies\n* `1500` - Possible File Upload attempt: asp/php (.ph, .asp or .ht) found in filename in a multipart POST containing a file\n* `2001` - Possible CVE-2022-22965 attack: Tomcat Pipeline Context tampering"
    },
    "name": {
      "type": "string",
      "minLength": 1,
      "pattern": ".*",
      "maxLength": 255
    },
    "path": {
      "type": [
        "string",
        "null"
      ],
      "pattern": ".*",
      "maxLength": 255,
      "minLength": 0
    },
    "conditions": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/WAFExceptionConditionRequest"
      },
      "minItems": 1
    },
    "operator": {
      "allOf": [
        {
          "$ref": "#/$defs/WAFRuleOperatorEnum"
        }
      ],
      "default": "contains"
    },
    "active": {
      "type": "boolean",
      "default": true
    }
  },
  "additionalProperties": false,
  "$defs": {
    "RuleIdEnum": {
      "enum": [
        0,
        1,
        2,
        10,
        11,
        12,
        13,
        14,
        15,
        16,
        17,
        18,
        1000,
        1001,
        1002,
        1003,
        1004,
        1005,
        1006,
        1007,
        1008,
        1009,
        1010,
        1011,
        1013,
        1015,
        1016,
        1017,
        1100,
        1101,
        1102,
        1103,
        1104,
        1105,
        1106,
        1107,
        1108,
        1109,
        1110,
        1198,
        1199,
        1200,
        1202,
        1203,
        1204,
        1205,
        1206,
        1207,
        1208,
        1209,
        1210,
        1302,
        1303,
        1310,
        1311,
        1312,
        1314,
        1315,
        1400,
        1401,
        1402,
        1500,
        2001
      ],
      "type": "integer",
      "description": "* `0` - All Rules\n* `1` - Validation of protocol compliance: weird request, unable to parse\n* `2` - Request too big, stored on disk and not parsed\n* `10` - Validation of protocol compliance: invalid HEX encoding (null bytes)\n* `11` - Validation of protocol compliance: missing or unknown Content-Type header in a POST (this rule applies only to Request Body match zone)\n* `12` - Validation of protocol compliance: invalid formatted URL\n* `13` - Validation of protocol compliance: invalid POST format\n* `14` - Validation of protocol compliance: invalid POST boundary\n* `15` - Validation of protocol compliance: invalid JSON\n* `16` - Validation of protocol compliance: POST with no body\n* `17` - Possible SQL Injection attack: validation with libinjection_sql\n* `18` - Possible XSS attack: validation with libinjection_xss\n* `1000` - Possible SQL Injection attack: SQL keywords found in Body, Path, Query String or Cookies\n* `1001` - Possible SQL Injection or XSS attack: double quote (\") found in Body, Path, Query String or Cookies\n* `1002` - Possible SQL Injection attack: possible hex encoding (0x) found in Body, Path, Query String or Cookies\n* `1003` - Possible SQL Injection attack: MySQL comment (/*) found in Body, Path, Query String or Cookies\n* `1004` - Possible SQL Injection attack: MySQL comment (*​/) found in Body, Path, Query String or Cookies\n* `1005` - Possible SQL Injection attack: MySQL keyword (|) found in Body, Path, Query String or Cookies\n* `1006` - Possible SQL Injection attack: MySQL keyword (&&) found in Body, Path, Query String or Cookies\n* `1007` - Possible SQL Injection attack: MySQL comment (--) found in Body, Path, Query String or Cookies\n* `1008` - Possible SQL Injection or XSS attack: semicolon (;) found in Body, Path or Query String\n* `1009` - Possible SQL Injection attack: equal sign (=) found in Body or Query String\n* `1010` - Possible SQL Injection or XSS attack: open parenthesis [(] found in Body, Path, Query String or Cookies\n* `1011` - Possible SQL Injection or XSS attack: close parenthesis [)] found in Body, Path, Query String or Cookies\n* `1013` - Possible SQL Injection or XSS attack: apostrophe (') found in Body, Path, Query String or Cookies\n* `1015` - Possible SQL Injection attack: comma (,) found in Body, Path, Query String or Cookies\n* `1016` - Possible SQL Injection attack: MySQL comment (#) found in Body, Path, Query String or Cookies\n* `1017` - Possible SQL Injection attack: double at sign (@@) found in Body, Path, Query String or Cookies\n* `1100` - Possible RFI attack: scheme \"http://\" found in Body, Query String or Cookies\n* `1101` - Possible RFI attack: scheme \"https://\" found in Body, Query String or Cookies\n* `1102` - Possible RFI attack: scheme \"ftp://\" found in Body, Query String or Cookies\n* `1103` - Possible RFI attack: scheme \"php://\" found in Body, Query String or Cookies\n* `1104` - Possible RFI attack: scheme \"sftp://\" found in Body, Query String or Cookies\n* `1105` - Possible RFI attack: scheme \"zlib://\" found in Body, Query String or Cookies\n* `1106` - Possible RFI attack: scheme \"data://\" found in Body, Query String or Cookies\n* `1107` - Possible RFI attack: scheme \"glob://\" found in Body, Query String or Cookies\n* `1108` - Possible RFI attack: scheme \"phar://\" found in Body, Query String or Cookies\n* `1109` - Possible RFI attack: scheme \"file://\" found in Body, Query String or Cookies\n* `1110` - Possible RFI attack: scheme \"gopher://\" found in Body, Query String or Cookies\n* `1198` - Possible RCE attack: validation with log4j (Log4Shell) in HEADERS_VAR\n* `1199` - Possible RCE attack: validation with log4j (Log4Shell) in Body, Path, Query String, Headers or Cookies\n* `1200` - Possible Directory Traversal attack: double dot (..) found in Body, Path, Query String or Cookies\n* `1202` - Possible Directory Traversal attack: obvious probe (/etc/passwd) found in Body, Path, Query String or Cookies\n* `1203` - Possible Directory Traversal attack: obvious windows path (c:\\) found in Body, Path, Query String or Cookies\n* `1204` - Possible Directory Traversal attack: obvious probe (cmd.exe) found in Body, Path, Query String or Cookies\n* `1205` - Possible Directory Traversal attack: backslash (\\) found in Body, Path, Query String or Cookies\n* `1206` - Possible Directory Traversal attack: slash (/) found in Body, Query String or Cookies\n* `1207` - Possible Directory Traversal attack: obvious path probe (/..;/) found in Body, Query String or Cookies\n* `1208` - Possible Directory Traversal attack: obvious path probe (/.;/) found in Body, Query String or Cookies\n* `1209` - Possible Directory Traversal attack: obvious path probe (/.%2e/) found in Body, Query String or Cookies\n* `1210` - Possible Directory Traversal attack: obvious path probe (/%2e./) found in Body, Query String or Cookies\n* `1302` - Possible XSS attack: html open tag (<) found in Body, Path, Query String or Cookies\n* `1303` - Possible XSS attack: html close tag (>) found in Body, Path, Query String or Cookies\n* `1310` - Possible XSS attack: open square bracket ([) found in Body, Path, Query String or Cookies\n* `1311` - Possible XSS attack: close square bracket (]) found in Body, Path, Query String or Cookies\n* `1312` - Possible XSS attack: tilde character (~) found in Body, Path, Query String or Cookies\n* `1314` - Possible XSS attack: back quote ( `) found in Body, Path, Query String or Cookies\n* `1315` - Possible XSS attack: double encoding (%[2|3]) found in Body, Path, Query String or Cookies\n* `1400` - Possible trick to evade protection: UTF7/8 encoding (&#) found in Body, Path, Query String or Cookies\n* `1401` - Possible trick to evade protection: MS encoding (%U) found in Body, Path, Query String or Cookies\n* `1402` - Possible trick to evade protection: encoded chars (%20-%3F) found in Body, Query String or Cookies\n* `1500` - Possible File Upload attempt: asp/php (.ph, .asp or .ht) found in filename in a multipart POST containing a file\n* `2001` - Possible CVE-2022-22965 attack: Tomcat Pipeline Context tampering",
      "title": "RuleIdEnum",
      "x-extensible-enum": [
        0,
        1,
        2,
        10,
        11,
        12,
        13,
        14,
        15,
        16,
        17,
        18,
        1000,
        1001,
        1002,
        1003,
        1004,
        1005,
        1006,
        1007,
        1008,
        1009,
        1010,
        1011,
        1013,
        1015,
        1016,
        1017,
        1100,
        1101,
        1102,
        1103,
        1104,
        1105,
        1106,
        1107,
        1108,
        1109,
        1110,
        1198,
        1199,
        1200,
        1202,
        1203,
        1204,
        1205,
        1206,
        1207,
        1208,
        1209,
        1210,
        1302,
        1303,
        1310,
        1311,
        1312,
        1314,
        1315,
        1400,
        1401,
        1402,
        1500,
        2001
      ],
      "x-enum-varnames": [
        "AllRules",
        "WeirdRequest",
        "RequestTooBig",
        "InvalidHexEncoding",
        "MissingContentType",
        "InvalidFormattedUrl",
        "InvalidPostFormat",
        "InvalidPostBoundary",
        "InvalidJson",
        "PostWithNoBody",
        "SqlInjectionLibinjection",
        "XssLibinjection",
        "SqlKeywordsFound",
        "SqlDoubleQuote",
        "SqlHexEncoding",
        "SqlCommentOpen",
        "SqlCommentClose",
        "SqlPipe",
        "SqlAnd",
        "SqlDashComment",
        "SqlSemicolon",
        "SqlEquals",
        "SqlOpenParen",
        "SqlCloseParen",
        "SqlApostrophe",
        "SqlComma",
        "SqlHashComment",
        "SqlDoubleAt",
        "RfiHttp",
        "RfiHttps",
        "RfiFtp",
        "RfiPhp",
        "RfiSftp",
        "RfiZlib",
        "RfiData",
        "RfiGlob",
        "RfiPhar",
        "RfiFile",
        "RfiGopher",
        "RceLog4jHeaders",
        "RceLog4jAll",
        "DirectoryTraversalDoubleDot",
        "DirectoryTraversalEtcPasswd",
        "DirectoryTraversalWindowsPath",
        "DirectoryTraversalCmdExe",
        "DirectoryTraversalBackslash",
        "DirectoryTraversalSlash",
        "DirectoryTraversalDotSemicolon",
        "DirectoryTraversalSlashDotSemicolon",
        "DirectoryTraversalDotEncoded",
        "DirectoryTraversalEncodedDot",
        "XssOpenTag",
        "XssCloseTag",
        "XssOpenBracket",
        "XssCloseBracket",
        "XssTilde",
        "XssBackQuote",
        "XssDoubleEncoding",
        "EvasionUtf78",
        "EvasionMsEncoding",
        "EvasionEncodedChars",
        "FileUploadAspPhp",
        "CveSpring4Shell"
      ],
      "format": "int64"
    },
    "WAFExceptionConditionRequest": {
      "oneOf": [
        {
          "$ref": "#/$defs/WAFExceptionGenericConditionRequest"
        },
        {
          "$ref": "#/$defs/WAFExceptionSpecificConditionOnNameRequest"
        },
        {
          "$ref": "#/$defs/WAFExceptionSpecificConditionOnValueRequest"
        }
      ],
      "title": "WAFExceptionConditionRequest",
      "additionalProperties": false
    },
    "WAFExceptionGenericConditionMatchEnum": {
      "enum": [
        "any_http_header_name",
        "any_http_header_value",
        "any_query_string_name",
        "any_query_string_value",
        "any_url",
        "body_form_field_name",
        "body_form_field_value",
        "file_extension",
        "raw_body"
      ],
      "type": "string",
      "description": "* `any_http_header_name` - any_http_header_name\n* `any_http_header_value` - any_http_header_value\n* `any_query_string_name` - any_query_string_name\n* `any_query_string_value` - any_query_string_value\n* `any_url` - any_url\n* `body_form_field_name` - body_form_field_name\n* `body_form_field_value` - body_form_field_value\n* `file_extension` - file_extension\n* `raw_body` - raw_body",
      "title": "WAFExceptionGenericConditionMatchEnum",
      "x-extensible-enum": [
        "any_http_header_name",
        "any_http_header_value",
        "any_query_string_name",
        "any_query_string_value",
        "any_url",
        "body_form_field_name",
        "body_form_field_value",
        "file_extension",
        "raw_body"
      ]
    },
    "WAFExceptionGenericConditionRequest": {
      "type": "object",
      "properties": {
        "match": {
          "$ref": "#/$defs/WAFExceptionGenericConditionMatchEnum"
        }
      },
      "required": [
        "match"
      ],
      "title": "WAFExceptionGenericConditionRequest",
      "additionalProperties": false
    },
    "WAFExceptionSpecificConditionOnNameMatchEnum": {
      "enum": [
        "specific_body_form_field_name",
        "specific_http_header_name",
        "specific_query_string_name"
      ],
      "type": "string",
      "description": "* `specific_body_form_field_name` - specific_body_form_field_name\n* `specific_http_header_name` - specific_http_header_name\n* `specific_query_string_name` - specific_query_string_name",
      "title": "WAFExceptionSpecificConditionOnNameMatchEnum",
      "x-extensible-enum": [
        "specific_body_form_field_name",
        "specific_http_header_name",
        "specific_query_string_name"
      ]
    },
    "WAFExceptionSpecificConditionOnNameRequest": {
      "type": "object",
      "properties": {
        "match": {
          "$ref": "#/$defs/WAFExceptionSpecificConditionOnNameMatchEnum"
        },
        "name": {
          "type": "string",
          "minLength": 1,
          "pattern": ".*",
          "maxLength": 255
        }
      },
      "required": [
        "match",
        "name"
      ],
      "title": "WAFExceptionSpecificConditionOnNameRequest",
      "additionalProperties": false
    },
    "WAFExceptionSpecificConditionOnValueMatchEnum": {
      "enum": [
        "specific_body_form_field_value",
        "specific_http_header_value",
        "specific_query_string_value"
      ],
      "type": "string",
      "description": "* `specific_body_form_field_value` - specific_body_form_field_value\n* `specific_http_header_value` - specific_http_header_value\n* `specific_query_string_value` - specific_query_string_value",
      "title": "WAFExceptionSpecificConditionOnValueMatchEnum",
      "x-extensible-enum": [
        "specific_body_form_field_value",
        "specific_http_header_value",
        "specific_query_string_value"
      ]
    },
    "WAFExceptionSpecificConditionOnValueRequest": {
      "type": "object",
      "properties": {
        "match": {
          "$ref": "#/$defs/WAFExceptionSpecificConditionOnValueMatchEnum"
        },
        "value": {
          "type": "string",
          "minLength": 1,
          "pattern": ".*",
          "maxLength": 255
        }
      },
      "required": [
        "match",
        "value"
      ],
      "title": "WAFExceptionSpecificConditionOnValueRequest",
      "additionalProperties": false
    },
    "WAFRuleOperatorEnum": {
      "enum": [
        "regex",
        "contains"
      ],
      "type": "string",
      "description": "* `regex` - regex\n* `contains` - contains",
      "title": "WAFRuleOperatorEnum",
      "x-extensible-enum": [
        "regex",
        "contains"
      ]
    }
  }
}