Firewall regex not working

I’m trying to block urls where keywords=http or keywords=https.

I added the following rule:
(http.request.uri.query matches “keywords=http(?:s)?:”)

it’s not blocking /news.cfm?keywords=

Just tried the following and it worked just fine

(http.request.uri.query matches "keywords=https?:")

Make sure the order of you firewall rules is correct.

This topic was automatically closed after 30 days. New replies are no longer allowed.