Parameter names
Procedure
In the Name text box, enter the parameter or cookie
name, or a regular expression that matches it:
- All text is case-sensitive; add (?i) to the regexp if you want it to be case-insensitive
- Strings in the regexp are considered partial; you do not need to add (.*)
A number of default definitions are provided.
Type |
Value |
Includes |
|---|---|---|
Parameter |
__VIEWSTATE |
parameters with this string in their name |
Parameter and Cookie |
^CFID |
parameters and cookies whose names begin with CFID or cfid |
Parameter and Cookie |
Token |
parameters and cookies whose names include "Token" |
Note: A regular expression (regexp) is a string that describes
a set of strings, according to certain syntax rules. IBM® Security's Expression Test PowerTool (Tools
> Expression Test) can be useful to verify the syntax
of your regexps.
If you need additional help writing regexps you may find the following link useful: http://www.regular-expressions.info/quickstart.html