-
Notifications
You must be signed in to change notification settings - Fork 603
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: Add example Injection Protection plugin log #8286
base: main
Are you sure you want to change the base?
Conversation
Signed-off-by: Diana <[email protected]>
✅ Deploy Preview for kongdocs ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
@@ -81,6 +81,12 @@ Logs are automatically collected when you enable the Injection Protection plugin | |||
* [UDP Log](/hub/kong-inc/udp-log/) | |||
* [{{site.konnect_short_name}} Advanced Analytics](/konnect/analytics/) <!--though i'm not sure if they will do anything with them yet--> | |||
|
|||
The following is an example of the information that is logged by the Injection Protection plugin: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The following is an example of the information that is logged by the Injection Protection plugin: | |
Here's a sample log entry created by the Injection Protection plugin. |
Slight rephrase to make it sound less formal + shorten the sentence.
``` | ||
threat detected: 'sql', action taken: log_only, found in path_and_query, query param value: foo: insert into test | ||
``` | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Where: | |
* The plugin detected a SQL injection threat | |
* It created a log entry but took no other actions | |
* The threat was found in the request path or query | |
* The inserted snippet is `foo: insert into test` |
I'd add something like this to give the log message a tiny bit of context. Not sure if I got it all correct, so please double-check.
Description
Added an example Injection Protection plugin log.
Testing instructions
Preview link:
Checklist