3 ms·
WAF has it's purpose but it's clearly not a silver bullet. Nothing is.
by simlevesque 7y ago
WAF has it's purpose but it's clearly not a silver bullet. Nothing is.
- DJBunnies 7y agoIf it's so easily circumvented I wonder if it's worth the costs.
- nullwasamistake 7y agoWAF is brittle and breaks more than it fixes IMO. It's just regex against URL's in 99% of cases. If you think you need one, you need to fix the app code, there will be more vulnerabilities it doesn't block
- simlevesque 7y agoWAF provides a lot of other things, such as IP based filtering.