API Connect

API Connect

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  XML Threat Protection through DP Extension

    Posted Fri October 21, 2022 04:53 PM
    Hi Team,

    Can you please advise if we can implement XML Threat Protection in API Connect using datapower extension .I wanted to implement XML Threat Protection(SQL Injection) in API Connect but do not find any policy that supports it.Kindly help

    Regards
    Sadhana

    ------------------------------
    Sadhana
    ------------------------------


  • 2.  RE: XML Threat Protection through DP Extension

    Posted Tue October 25, 2022 09:09 AM

    Hi Sadhana,

    DataPower implements SQL Injection threat protection via a stylesheet in store:///SQL-Injection-Filter.xsl which references store:///SQL-Injection-Patterns.xml.  The xml file is a sample that you are expected to modify to meet your needs.  For API Connect, you could have a xslt policy that would use the dp:transform extension function, passing your message.body as a payload.   If this is something that would need to be done for every transaction, you would need to do this xslt policy in a pre-request global policy.

    Best Regards,

    Steve



    ------------------------------
    Steve Linn
    Senior Consulting I/T Specialist
    IBM
    ------------------------------

    Original Message


  • 3.  RE: XML Threat Protection through DP Extension

    Posted Tue October 25, 2022 11:04 AM
    Thank you Steve,
    I will try and implement in APIC using XSLT

    ------------------------------
    Sadhana Guduru
    ------------------------------

    Original Message