AnsweredAssumed Answered

Input Validation content-type constraint

Question asked by Johannes Eckerdal Champion on Aug 30, 2017
Latest reply on Sep 22, 2017 by Johannes Eckerdal


we can read in the IV user-guide that only POST bodies of content-type application/x-www-form-urlencoded can be validated.

We understand this constraint, but are curious whether we could still use IV for other content-type POSTs as of:

- Fail if body is > 16kb

- Fail if number of retries exceeds our configured threshold


It is also interesting that content-type is one of the available request headers (page 87) one can use as match in the rule builder of IV. So, would it then be possible to validate the request NOT having a application/x-www-form-urlencoded POST body, or does the constraint simply mean that the request is not passed to IV?