Hi,

I am running haproxy v1.6.4, and I am attempting to block a specific request 
regex pattern. I am encountering issues with matching the question mark in the 
request. What I would like to block is requests that match this pattern:
/api/.../.../sql?

I would like to include the question mark on the end of the "/sql" but I am 
unable to find a regex string that works for this in haproxy. I have tried the 
following ACL's which all worked in various regex testing sites (including ones 
specifically for posix regex, e.g. http://regjex.com):
acl uri_sql path_reg -i ^/api/(.*)?/sql\?.*$
acl uri_sql path_reg -i ^/api/(.*)?/sql\\?.*$
acl uri_sql path_reg -i ^/api/(.*)?/sql[?].*$

If I remove the question mark and search for the following, the regex works 
fine, but I would like for it to be more restrictive.
acl uri_sql path_reg -i ^/api/(.*)?/sql.*$

My deny line is as follows:
http-request deny if uri_sql

Can you please provide assistance?

Regards,

Chad Moomjian
Systems Administrator

OutMatch
972.233.6098 (direct)
1.800.283.6055 x116
www.outmatch.com<http://www.outmatch.com/>

Reply via email to