How to check Accept-Language headers in Firewall Rules

[faster]

i want to [JS Challenge] Accept-Language don’t have [zh]

Accept-Language: zh,en-US;q=0.7,en;q=0.3 pass
Accept-Language: en-US,en;q=0.9 JS Challenge it

[sdayman]

This is new and might work:

@smarsh

we now have a new field in Transform Rules (and Firewall Rules too, if we want?) called http.request.accepted_languages[] (docs ). We essentially take the Accept-Language header from the browser and format it into an array, based on preference of the browser.

EDIT: The link is to a limited access category, but the quote hits the high point, plus the docs link works.

[smarsh]

Indeed, that field is only available in Transform Rules right now. I can raise a feature request to get this added to Firewall Rules in the new year

[faster]

is ok?

all(http.request.headers[“accept-language”][*] != “zh”)

[faster]

but why this no work
not all(http.request.headers[“accept-language”][*] contains “zh”)