openapi2apigeeck2

[ { "element": "Header", "filters": [ { "flags": "i", "original": "(?i:<script.*?>)", "rule": "(?:<script.*?>)" }, { "flags": "i", "original": "(?i:<style.*?>.*?((@[i\\\\\\\\])|(([:=]|(&#x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\\\\\]|(&#x?0*((40)|(28)|(92)|(5C));?)))))", "rule": "(?:<style.*?>.*?((@[i\\\\\\\\])|(([:=]|(&#x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\\\\\]|(&#x?0*((40)|(28)|(92)|(5C));?)))))" }, { "flags": "i", "original": "(?i:<script.*?[ /+\\t]*?((src)|(xlink:href)|(href))[ /+\\t]*=)", "rule": "(?:<script.*?[ /+\\t]*?((src)|(xlink:href)|(href))[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<[i]?frame.*?[ /+\\t]*?src[ /+\\t]*=)", "rule": "(?:<[i]?frame.*?[ /+\\t]*?src[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<.*[:]vmlframe.*?[ /+\\t]*?src[ /+\\t]*=)", "rule": "(?:<.*[:]vmlframe.*?[ /+\\t]*?src[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:(j|(&#x?0*((74)|(4A)|(106)|(6A));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(a|(&#x?0*((65)|(41)|(97)|(61));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(v|(&#x?0*((86)|(56)|(118)|(76));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(a|(&#x?0*((65)|(41)|(97)|(61));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(s|(&#x?0*((83)|(53)|(115)|(73));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(c|(&#x?0*((67)|(43)|(99)|(63));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(r|(&#x?0*((82)|(52)|(114)|(72));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(i|(&#x?0*((73)|(49)|(105)|(69));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(p|(&#x?0*((80)|(50)|(112)|(70));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(t|(&#x?0*((84)|(54)|(116)|(74));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(:|(&((#x?0*((58)|(3A));?)|(colon;)))).)", "rule": "(?:(j|(&#x?0*((74)|(4A)|(106)|(6A));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(a|(&#x?0*((65)|(41)|(97)|(61));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(v|(&#x?0*((86)|(56)|(118)|(76));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(a|(&#x?0*((65)|(41)|(97)|(61));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(s|(&#x?0*((83)|(53)|(115)|(73));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(c|(&#x?0*((67)|(43)|(99)|(63));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(r|(&#x?0*((82)|(52)|(114)|(72));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(i|(&#x?0*((73)|(49)|(105)|(69));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(p|(&#x?0*((80)|(50)|(112)|(70));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(t|(&#x?0*((84)|(54)|(116)|(74));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(:|(&((#x?0*((58)|(3A));?)|(colon;)))).)" }, { "flags": "i", "original": "(?i:(v|(&#x?0*((86)|(56)|(118)|(76));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(b|(&#x?0*((66)|(42)|(98)|(62));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(s|(&#x?0*((83)|(53)|(115)|(73));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(c|(&#x?0*((67)|(43)|(99)|(63));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(r|(&#x?0*((82)|(52)|(114)|(72));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(i|(&#x?0*((73)|(49)|(105)|(69));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(p|(&#x?0*((80)|(50)|(112)|(70));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(t|(&#x?0*((84)|(54)|(116)|(74));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(:|(&((#x?0*((58)|(3A));?)|(colon;)))).)", "rule": "(?:(v|(&#x?0*((86)|(56)|(118)|(76));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(b|(&#x?0*((66)|(42)|(98)|(62));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(s|(&#x?0*((83)|(53)|(115)|(73));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(c|(&#x?0*((67)|(43)|(99)|(63));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(r|(&#x?0*((82)|(52)|(114)|(72));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(i|(&#x?0*((73)|(49)|(105)|(69));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(p|(&#x?0*((80)|(50)|(112)|(70));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(t|(&#x?0*((84)|(54)|(116)|(74));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(:|(&((#x?0*((58)|(3A));?)|(colon;)))).)" }, { "flags": "i", "original": "(?i:<EMBED[ /+\\t].*?((src)|(type)).*?=)", "rule": "(?:<EMBED[ /+\\t].*?((src)|(type)).*?=)" }, { "flags": "i", "original": "(?i:<[?]?import[ /+\\t].*?implementation[ /+\\t]*=)", "rule": "(?:<[?]?import[ /+\\t].*?implementation[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<META[ /+\\t].*?http-equiv[ /+\\t]*=[ /+\\t]*[\\\"\\'`]?(((c|(&#x?0*((67)|(43)|(99)|(63));?)))|((r|(&#x?0*((82)|(52)|(114)|(72));?)))|((s|(&#x?0*((83)|(53)|(115)|(73));?)))))", "rule": "(?:<META[ /+\\t].*?http-equiv[ /+\\t]*=[ /+\\t]*[\\\"\\'`]?(((c|(&#x?0*((67)|(43)|(99)|(63));?)))|((r|(&#x?0*((82)|(52)|(114)|(72));?)))|((s|(&#x?0*((83)|(53)|(115)|(73));?)))))" }, { "flags": "i", "original": "(?i:<META[ /+\\t].*?charset[ /+\\t]*=)", "rule": "(?:<META[ /+\\t].*?charset[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<LINK[ /+\\t].*?href[ /+\\t]*=)", "rule": "(?:<LINK[ /+\\t].*?href[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<BASE[ /+\\t].*?href[ /+\\t]*=)", "rule": "(?:<BASE[ /+\\t].*?href[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<APPLET[ /+\\t>])", "rule": "(?:<APPLET[ /+\\t>])" }, { "flags": "i", "original": "(?i:<OBJECT[ /+\\t].*?((type)|(codetype)|(classid)|(code)|(data))[ /+\\t]*=)", "rule": "(?:<OBJECT[ /+\\t].*?((type)|(codetype)|(classid)|(code)|(data))[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:[\\\"\\'].*?[,].*(((v|(\\\\\\\\u0076)|(\\\\166)|(\\\\x76))[^a-z0-9]*(a|(\\\\\\\\u0061)|(\\\\141)|(\\\\x61))[^a-z0-9]*(l|(\\\\\\\\u006C)|(\\\\154)|(\\\\x6C))[^a-z0-9]*(u|(\\\\\\\\u0075)|(\\\\165)|(\\\\x75))[^a-z0-9]*(e|(\\\\\\\\u0065)|(\\\\145)|(\\\\x65))[^a-z0-9]*(O|(\\\\\\\\u004F)|(\\\\117)|(\\\\x4F))[^a-z0-9]*(f|(\\\\\\\\u0066)|(\\\\146)|(\\\\x66)))|((t|(\\\\\\\\u0074)|(\\\\164)|(\\\\x74))[^a-z0-9]*(o|(\\\\\\\\u006F)|(\\\\157)|(\\\\x6F))[^a-z0-9]*(S|(\\\\\\\\u0053)|(\\\\123)|(\\\\x53))[^a-z0-9]*(t|(\\\\\\\\u0074)|(\\\\164)|(\\\\x74))[^a-z0-9]*(r|(\\\\\\\\u0072)|(\\\\162)|(\\\\x72))[^a-z0-9]*(i|(\\\\\\\\u0069)|(\\\\151)|(\\\\x69))[^a-z0-9]*(n|(\\\\\\\\u006E)|(\\\\156)|(\\\\x6E))[^a-z0-9]*(g|(\\\\\\\\u0067)|(\\\\147)|(\\\\x67)))).*?:)", "rule": "(?:[\\\"\\'].*?[,].*(((v|(\\\\\\\\u0076)|(\\\\166)|(\\\\x76))[^a-z0-9]*(a|(\\\\\\\\u0061)|(\\\\141)|(\\\\x61))[^a-z0-9]*(l|(\\\\\\\\u006C)|(\\\\154)|(\\\\x6C))[^a-z0-9]*(u|(\\\\\\\\u0075)|(\\\\165)|(\\\\x75))[^a-z0-9]*(e|(\\\\\\\\u0065)|(\\\\145)|(\\\\x65))[^a-z0-9]*(O|(\\\\\\\\u004F)|(\\\\117)|(\\\\x4F))[^a-z0-9]*(f|(\\\\\\\\u0066)|(\\\\146)|(\\\\x66)))|((t|(\\\\\\\\u0074)|(\\\\164)|(\\\\x74))[^a-z0-9]*(o|(\\\\\\\\u006F)|(\\\\157)|(\\\\x6F))[^a-z0-9]*(S|(\\\\\\\\u0053)|(\\\\123)|(\\\\x53))[^a-z0-9]*(t|(\\\\\\\\u0074)|(\\\\164)|(\\\\x74))[^a-z0-9]*(r|(\\\\\\\\u0072)|(\\\\162)|(\\\\x72))[^a-z0-9]*(i|(\\\\\\\\u0069)|(\\\\151)|(\\\\x69))[^a-z0-9]*(n|(\\\\\\\\u006E)|(\\\\156)|(\\\\x6E))[^a-z0-9]*(g|(\\\\\\\\u0067)|(\\\\147)|(\\\\x67)))).*?:)" }, { "flags": "i", "original": "(?i:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?\$.*?\$)", "rule": "(?:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?\$.*?\$)" }, { "flags": "i", "original": "(?i:[\\\"\\'].*?\\)[ ]*(([^a-z0-9~_:\\' ])|(in)).+?\$)", "rule": "(?:[\\\"\\'].*?\$[ ]*(([^a-z0-9~_:\\' ])|(in)).+?\\()" }, { "flags": "i", "original": "(?i:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?[.].+?=)", "rule": "(?:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?[.].+?=)" }, { "flags": "i", "original": "(?i:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?[\\[].*?[\\]].*?=)", "rule": "(?:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?[\\[].*?[\\]].*?=)" }, { "flags": "i", "original": "(?i:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).*?(((l|(\\\\\\\\u006C))(o|(\\\\\\\\u006F))(c|(\\\\\\\\u0063))(a|(\\\\\\\\u0061))(t|(\\\\\\\\u0074))(i|(\\\\\\\\u0069))(o|(\\\\\\\\u006F))(n|(\\\\\\\\u006E)))|((n|(\\\\\\\\u006E))(a|(\\\\\\\\u0061))(m|(\\\\\\\\u006D))(e|(\\\\\\\\u0065)))|((o|(\\\\\\\\u006F))(n|(\\\\\\\\u006E))(e|(\\\\\\\\u0065))(r|(\\\\\\\\u0072))(r|(\\\\\\\\u0072))(o|(\\\\\\\\u006F))(r|(\\\\\\\\u0072)))|((v|(\\\\\\\\u0076))(a|(\\\\\\\\u0061))(l|(\\\\\\\\u006C))(u|(\\\\\\\\u0075))(e|(\\\\\\\\u0065))(O|(\\\\\\\\u004F))(f|(\\\\\\\\u0066)))).*?=)", "rule": "(?:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).*?(((l|(\\\\\\\\u006C))(o|(\\\\\\\\u006F))(c|(\\\\\\\\u0063))(a|(\\\\\\\\u0061))(t|(\\\\\\\\u0074))(i|(\\\\\\\\u0069))(o|(\\\\\\\\u006F))(n|(\\\\\\\\u006E)))|((n|(\\\\\\\\u006E))(a|(\\\\\\\\u0061))(m|(\\\\\\\\u006D))(e|(\\\\\\\\u0065)))|((o|(\\\\\\\\u006F))(n|(\\\\\\\\u006E))(e|(\\\\\\\\u0065))(r|(\\\\\\\\u0072))(r|(\\\\\\\\u0072))(o|(\\\\\\\\u006F))(r|(\\\\\\\\u0072)))|((v|(\\\\\\\\u0076))(a|(\\\\\\\\u0061))(l|(\\\\\\\\u006C))(u|(\\\\\\\\u0075))(e|(\\\\\\\\u0065))(O|(\\\\\\\\u004F))(f|(\\\\\\\\u0066)))).*?=)" }, { "flags": "i", "original": "(?i:<form.*?>)", "rule": "(?:<form.*?>)" }, { "flags": "i", "original": "(?i:<isindex[ /+\\t>])", "rule": "(?:<isindex[ /+\\t>])" }, { "flags": "i", "original": "(?i:[ /+\\t\\\"\\'`]style[ /+\\t]*?=.*([:=]|(&#x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\\\\\]|(&#x?0*((40)|(28)|(92)|(5C));?)))", "rule": "(?:[ /+\\t\\\"\\'`]style[ /+\\t]*?=.*([:=]|(&#x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\\\\\]|(&#x?0*((40)|(28)|(92)|(5C));?)))" }, { "flags": "i", "original": "(?i:[ /+\\t\\\"\\'`]on\\[a-z]\\[a-z]\\[a-z]+?[ +\\t]*?=.)", "rule": "(?:[ /+\\t\\\"\\'`]on\\[a-z]\\[a-z]\\[a-z]+?[ +\\t]*?=.)" }, { "flags": "i", "original": "(?i:[ /+\\t\\\"\\'`]datasrc[ +\\t]*?=.)", "rule": "(?:[ /+\\t\\\"\\'`]datasrc[ +\\t]*?=.)" }, { "flags": "", "original": "(/\\*!?|\\*/|[';]--|--[\\s\\r\\n\\v\\f]|(?:--[^-]*?-)|([^\\-&])#.*?[\\s\\r\\n\\v\\f]|;?\\\\x00)", "rule": "(/\\*!?|\\*/|[';]--|--[\\s\\r\\n\\v\\f]|(?:--[^-]*?-)|([^\\-&])#.*?[\\s\\r\\n\\v\\f]|;?\\\\x00)" }, { "flags": "i", "original": "(?i:(?:\\A|[^\\d])0x[a-f\\d]{3,}[a-f\\d]*)+", "rule": "(?:(?:\\A|[^\\d])0x[a-f\\d]{3,}[a-f\\d]*)+" }, { "flags": "i", "original": "(?i:(\\!\\=|\\&\\&|\\|\\||>>|<<|>=|<=|<>|<=>|\\bxor\\b|\\brlike\\b|\\bregexp\\b|\\bisnull\\b)|(?:not\\s+between\\s+0\\s+and)|(?:is\\s+null)|(like\\s+null)|(?:(?:^|\\W)in[+\\s]*\$[\\s\\d\\\"]+[^()]*\$)|(?:\\bxor\\b|<>|rlike(?:\\s+binary)?)|(?:regexp\\s+binary))", "rule": "(?:(\\!\\=|\\&\\&|\\|\\||>>|<<|>=|<=|<>|<=>|\\bxor\\b|\\brlike\\b|\\bregexp\\b|\\bisnull\\b)|(?:not\\s+between\\s+0\\s+and)|(?:is\\s+null)|(like\\s+null)|(?:(?:^|\\W)in[+\\s]*\$[\\s\\d\\\"]+[^()]*\$)|(?:\\bxor\\b|<>|rlike(?:\\s+binary)?)|(?:regexp\\s+binary))" }, { "flags": "i", "original": "(?i:(sleep\$(\\s*?)(\\d*?)(\\s*?)\$|benchmark\$(.*?)\\,(.*?)\$))", "rule": "(?:(sleep\$(\\s*?)(\\d*?)(\\s*?)\$|benchmark\$(.*?)\\,(.*?)\$))" }, { "flags": "i", "original": "(?i:(?:^(-0000023456|4294967295|4294967296|2147483648|2147483647|0000012345|-2147483648|-2147483649|0000023456|2.2.90738585072007e-308|1e309)$))", "rule": "(?:(?:^(-0000023456|4294967295|4294967296|2147483648|2147483647|0000012345|-2147483648|-2147483649|0000023456|2.2.90738585072007e-308|1e309)$))" }, { "flags": "i", "original": "(?i:(?:(select|;)\\s+(?:benchmark|if|sleep)\\s*?\$\\s*?\\(?\\s*?\\w+))", "rule": "(?:(?:(select|;)\\s+(?:benchmark|if|sleep)\\s*?\\(\\s*?\\(?\\s*?\\w+))" }, { "flags": "i", "original": "(?i:(?:[\\s()]case\\s*?\\()|(?:\$\\s*?like\\s*?\$)|(?:having\\s*?[^\\s]+\\s*?[^\\w\\s])|(?:if\\s?\\([\\d\\w]\\s*?[=<>~]))", "rule": "(?:(?:[\\s()]case\\s*?\\()|(?:\$\\s*?like\\s*?\$)|(?:having\\s*?[^\\s]+\\s*?[^\\w\\s])|(?:if\\s?\\([\\d\\w]\\s*?[=<>~]))" }, { "flags": "i", "original": "(?i:(?:(union(.*?)select(.*?)from)))", "rule": "(?:(?:(union(.*?)select(.*?)from)))" }, { "flags": "i", "original": "(?i:(?:\\[\\$(?:ne|eq|lte?|gte?|n?in|mod|all|size|exists|type|slice|x?or|div|like|between|and)\\]))", "rule": "(?:(?:\\[\\$(?:ne|eq|lte?|gte?|n?in|mod|all|size|exists|type|slice|x?or|div|like|between|and)\\]))" }, { "flags": "i", "original": "(?i:(?:procedure\\s+analyse\\s*?\\()|(?:;\\s*?(declare|open)\\s+[\\w-]+)|(?:create\\s+(procedure|function)\\s*?\\w+\\s*?\\(\\s*?\$\\s*?-)|(?:declare[^\\w]+[@#]\\s*?\\w+)|(exec\\s*?\$\\s*?@))", "rule": "(?:(?:procedure\\s+analyse\\s*?\\()|(?:;\\s*?(declare|open)\\s+[\\w-]+)|(?:create\\s+(procedure|function)\\s*?\\w+\\s*?\\(\\s*?\$\\s*?-)|(?:declare[^\\w]+[@#]\\s*?\\w+)|(exec\\s*?\\(\\s*?@))" }, { "flags": "i", "original": "(?i:(?:create\\s+function\\s+\\w+\\s+returns)|(?:;\\s*?(?:select|create|rename|truncate|load|alter|delete|update|insert|desc)\\s*?[\\[(]?\\w{2,}))", "rule": "(?:(?:create\\s+function\\s+\\w+\\s+returns)|(?:;\\s*?(?:select|create|rename|truncate|load|alter|delete|update|insert|desc)\\s*?[\\[(]?\\w{2,}))" } ], "name": "Cookie" }, { "element": "XMLPayload", "filters": [ { "flags": "i", "original": "(?i:<script.*?>)", "rule": "(?:<script.*?>)" }, { "flags": "i", "original": "(?i:<style.*?>.*?((@[i\\\\\\\\])|(([:=]|(&#x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\\\\\]|(&#x?0*((40)|(28)|(92)|(5C));?)))))", "rule": "(?:<style.*?>.*?((@[i\\\\\\\\])|(([:=]|(&#x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\\\\\]|(&#x?0*((40)|(28)|(92)|(5C));?)))))" }, { "flags": "i", "original": "(?i:<script.*?[ /+\\t]*?((src)|(xlink:href)|(href))[ /+\\t]*=)", "rule": "(?:<script.*?[ /+\\t]*?((src)|(xlink:href)|(href))[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<[i]?frame.*?[ /+\\t]*?src[ /+\\t]*=)", "rule": "(?:<[i]?frame.*?[ /+\\t]*?src[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<.*[:]vmlframe.*?[ /+\\t]*?src[ /+\\t]*=)", "rule": "(?:<.*[:]vmlframe.*?[ /+\\t]*?src[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:(j|(&#x?0*((74)|(4A)|(106)|(6A));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(a|(&#x?0*((65)|(41)|(97)|(61));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(v|(&#x?0*((86)|(56)|(118)|(76));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(a|(&#x?0*((65)|(41)|(97)|(61));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(s|(&#x?0*((83)|(53)|(115)|(73));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(c|(&#x?0*((67)|(43)|(99)|(63));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(r|(&#x?0*((82)|(52)|(114)|(72));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(i|(&#x?0*((73)|(49)|(105)|(69));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(p|(&#x?0*((80)|(50)|(112)|(70));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(t|(&#x?0*((84)|(54)|(116)|(74));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(:|(&((#x?0*((58)|(3A));?)|(colon;)))).)", "rule": "(?:(j|(&#x?0*((74)|(4A)|(106)|(6A));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(a|(&#x?0*((65)|(41)|(97)|(61));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(v|(&#x?0*((86)|(56)|(118)|(76));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(a|(&#x?0*((65)|(41)|(97)|(61));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(s|(&#x?0*((83)|(53)|(115)|(73));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(c|(&#x?0*((67)|(43)|(99)|(63));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(r|(&#x?0*((82)|(52)|(114)|(72));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(i|(&#x?0*((73)|(49)|(105)|(69));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(p|(&#x?0*((80)|(50)|(112)|(70));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(t|(&#x?0*((84)|(54)|(116)|(74));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(:|(&((#x?0*((58)|(3A));?)|(colon;)))).)" }, { "flags": "i", "original": "(?i:(v|(&#x?0*((86)|(56)|(118)|(76));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(b|(&#x?0*((66)|(42)|(98)|(62));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(s|(&#x?0*((83)|(53)|(115)|(73));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(c|(&#x?0*((67)|(43)|(99)|(63));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(r|(&#x?0*((82)|(52)|(114)|(72));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(i|(&#x?0*((73)|(49)|(105)|(69));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(p|(&#x?0*((80)|(50)|(112)|(70));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(t|(&#x?0*((84)|(54)|(116)|(74));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(:|(&((#x?0*((58)|(3A));?)|(colon;)))).)", "rule": "(?:(v|(&#x?0*((86)|(56)|(118)|(76));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(b|(&#x?0*((66)|(42)|(98)|(62));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(s|(&#x?0*((83)|(53)|(115)|(73));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(c|(&#x?0*((67)|(43)|(99)|(63));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(r|(&#x?0*((82)|(52)|(114)|(72));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(i|(&#x?0*((73)|(49)|(105)|(69));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(p|(&#x?0*((80)|(50)|(112)|(70));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(t|(&#x?0*((84)|(54)|(116)|(74));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(:|(&((#x?0*((58)|(3A));?)|(colon;)))).)" }, { "flags": "i", "original": "(?i:<EMBED[ /+\\t].*?((src)|(type)).*?=)", "rule": "(?:<EMBED[ /+\\t].*?((src)|(type)).*?=)" }, { "flags": "i", "original": "(?i:<[?]?import[ /+\\t].*?implementation[ /+\\t]*=)", "rule": "(?:<[?]?import[ /+\\t].*?implementation[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<META[ /+\\t].*?http-equiv[ /+\\t]*=[ /+\\t]*[\\\"\\'`]?(((c|(&#x?0*((67)|(43)|(99)|(63));?)))|((r|(&#x?0*((82)|(52)|(114)|(72));?)))|((s|(&#x?0*((83)|(53)|(115)|(73));?)))))", "rule": "(?:<META[ /+\\t].*?http-equiv[ /+\\t]*=[ /+\\t]*[\\\"\\'`]?(((c|(&#x?0*((67)|(43)|(99)|(63));?)))|((r|(&#x?0*((82)|(52)|(114)|(72));?)))|((s|(&#x?0*((83)|(53)|(115)|(73));?)))))" }, { "flags": "i", "original": "(?i:<META[ /+\\t].*?charset[ /+\\t]*=)", "rule": "(?:<META[ /+\\t].*?charset[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<LINK[ /+\\t].*?href[ /+\\t]*=)", "rule": "(?:<LINK[ /+\\t].*?href[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<BASE[ /+\\t].*?href[ /+\\t]*=)", "rule": "(?:<BASE[ /+\\t].*?href[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<APPLET[ /+\\t>])", "rule": "(?:<APPLET[ /+\\t>])" }, { "flags": "i", "original": "(?i:<OBJECT[ /+\\t].*?((type)|(codetype)|(classid)|(code)|(data))[ /+\\t]*=)", "rule": "(?:<OBJECT[ /+\\t].*?((type)|(codetype)|(classid)|(code)|(data))[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:[\\\"\\'].*?[,].*(((v|(\\\\\\\\u0076)|(\\\\166)|(\\\\x76))[^a-z0-9]*(a|(\\\\\\\\u0061)|(\\\\141)|(\\\\x61))[^a-z0-9]*(l|(\\\\\\\\u006C)|(\\\\154)|(\\\\x6C))[^a-z0-9]*(u|(\\\\\\\\u0075)|(\\\\165)|(\\\\x75))[^a-z0-9]*(e|(\\\\\\\\u0065)|(\\\\145)|(\\\\x65))[^a-z0-9]*(O|(\\\\\\\\u004F)|(\\\\117)|(\\\\x4F))[^a-z0-9]*(f|(\\\\\\\\u0066)|(\\\\146)|(\\\\x66)))|((t|(\\\\\\\\u0074)|(\\\\164)|(\\\\x74))[^a-z0-9]*(o|(\\\\\\\\u006F)|(\\\\157)|(\\\\x6F))[^a-z0-9]*(S|(\\\\\\\\u0053)|(\\\\123)|(\\\\x53))[^a-z0-9]*(t|(\\\\\\\\u0074)|(\\\\164)|(\\\\x74))[^a-z0-9]*(r|(\\\\\\\\u0072)|(\\\\162)|(\\\\x72))[^a-z0-9]*(i|(\\\\\\\\u0069)|(\\\\151)|(\\\\x69))[^a-z0-9]*(n|(\\\\\\\\u006E)|(\\\\156)|(\\\\x6E))[^a-z0-9]*(g|(\\\\\\\\u0067)|(\\\\147)|(\\\\x67)))).*?:)", "rule": "(?:[\\\"\\'].*?[,].*(((v|(\\\\\\\\u0076)|(\\\\166)|(\\\\x76))[^a-z0-9]*(a|(\\\\\\\\u0061)|(\\\\141)|(\\\\x61))[^a-z0-9]*(l|(\\\\\\\\u006C)|(\\\\154)|(\\\\x6C))[^a-z0-9]*(u|(\\\\\\\\u0075)|(\\\\165)|(\\\\x75))[^a-z0-9]*(e|(\\\\\\\\u0065)|(\\\\145)|(\\\\x65))[^a-z0-9]*(O|(\\\\\\\\u004F)|(\\\\117)|(\\\\x4F))[^a-z0-9]*(f|(\\\\\\\\u0066)|(\\\\146)|(\\\\x66)))|((t|(\\\\\\\\u0074)|(\\\\164)|(\\\\x74))[^a-z0-9]*(o|(\\\\\\\\u006F)|(\\\\157)|(\\\\x6F))[^a-z0-9]*(S|(\\\\\\\\u0053)|(\\\\123)|(\\\\x53))[^a-z0-9]*(t|(\\\\\\\\u0074)|(\\\\164)|(\\\\x74))[^a-z0-9]*(r|(\\\\\\\\u0072)|(\\\\162)|(\\\\x72))[^a-z0-9]*(i|(\\\\\\\\u0069)|(\\\\151)|(\\\\x69))[^a-z0-9]*(n|(\\\\\\\\u006E)|(\\\\156)|(\\\\x6E))[^a-z0-9]*(g|(\\\\\\\\u0067)|(\\\\147)|(\\\\x67)))).*?:)" }, { "flags": "i", "original": "(?i:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?\$.*?\$)", "rule": "(?:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?\$.*?\$)" }, { "flags": "i", "original": "(?i:[\\\"\\'].*?\\)[ ]*(([^a-z0-9~_:\\' ])|(in)).+?\$)", "rule": "(?:[\\\"\\'].*?\$[ ]*(([^a-z0-9~_:\\' ])|(in)).+?\\()" }, { "flags": "i", "original": "(?i:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?[.].+?=)", "rule": "(?:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?[.].+?=)" }, { "flags": "i", "original": "(?i:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?[\\[].*?[\\]].*?=)", "rule": "(?:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?[\\[].*?[\\]].*?=)" }, { "flags": "i", "original": "(?i:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).*?(((l|(\\\\\\\\u006C))(o|(\\\\\\\\u006F))(c|(\\\\\\\\u0063))(a|(\\\\\\\\u0061))(t|(\\\\\\\\u0074))(i|(\\\\\\\\u0069))(o|(\\\\\\\\u006F))(n|(\\\\\\\\u006E)))|((n|(\\\\\\\\u006E))(a|(\\\\\\\\u0061))(m|(\\\\\\\\u006D))(e|(\\\\\\\\u0065)))|((o|(\\\\\\\\u006F))(n|(\\\\\\\\u006E))(e|(\\\\\\\\u0065))(r|(\\\\\\\\u0072))(r|(\\\\\\\\u0072))(o|(\\\\\\\\u006F))(r|(\\\\\\\\u0072)))|((v|(\\\\\\\\u0076))(a|(\\\\\\\\u0061))(l|(\\\\\\\\u006C))(u|(\\\\\\\\u0075))(e|(\\\\\\\\u0065))(O|(\\\\\\\\u004F))(f|(\\\\\\\\u0066)))).*?=)", "rule": "(?:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).*?(((l|(\\\\\\\\u006C))(o|(\\\\\\\\u006F))(c|(\\\\\\\\u0063))(a|(\\\\\\\\u0061))(t|(\\\\\\\\u0074))(i|(\\\\\\\\u0069))(o|(\\\\\\\\u006F))(n|(\\\\\\\\u006E)))|((n|(\\\\\\\\u006E))(a|(\\\\\\\\u0061))(m|(\\\\\\\\u006D))(e|(\\\\\\\\u0065)))|((o|(\\\\\\\\u006F))(n|(\\\\\\\\u006E))(e|(\\\\\\\\u0065))(r|(\\\\\\\\u0072))(r|(\\\\\\\\u0072))(o|(\\\\\\\\u006F))(r|(\\\\\\\\u0072)))|((v|(\\\\\\\\u0076))(a|(\\\\\\\\u0061))(l|(\\\\\\\\u006C))(u|(\\\\\\\\u0075))(e|(\\\\\\\\u0065))(O|(\\\\\\\\u004F))(f|(\\\\\\\\u0066)))).*?=)" }, { "flags": "i", "original": "(?i:<form.*?>)", "rule": "(?:<form.*?>)" }, { "flags": "i", "original": "(?i:<isindex[ /+\\t>])", "rule": "(?:<isindex[ /+\\t>])" }, { "flags": "i", "original": "(?i:[ /+\\t\\\"\\'`]style[ /+\\t]*?=.*([:=]|(&#x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\\\\\]|(&#x?0*((40)|(28)|(92)|(5C));?)))", "rule": "(?:[ /+\\t\\\"\\'`]style[ /+\\t]*?=.*([:=]|(&#x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\\\\\]|(&#x?0*((40)|(28)|(92)|(5C));?)))" }, { "flags": "i", "original": "(?i:[ /+\\t\\\"\\'`]on\\[a-z]\\[a-z]\\[a-z]+?[ +\\t]*?=.)", "rule": "(?:[ /+\\t\\\"\\'`]on\\[a-z]\\[a-z]\\[a-z]+?[ +\\t]*?=.)" }, { "flags": "i", "original": "(?i:[ /+\\t\\\"\\'`]datasrc[ +\\t]*?=.)", "rule": "(?:[ /+\\t\\\"\\'`]datasrc[ +\\t]*?=.)" }, { "flags": "", "original": "(/\\*!?|\\*/|[';]--|--[\\s\\r\\n\\v\\f]|(?:--[^-]*?-)|([^\\-&])#.*?[\\s\\r\\n\\v\\f]|;?\\\\x00)", "rule": "(/\\*!?|\\*/|[';]--|--[\\s\\r\\n\\v\\f]|(?:--[^-]*?-)|([^\\-&])#.*?[\\s\\r\\n\\v\\f]|;?\\\\x00)" }, { "flags": "i", "original": "(?i:(?:\\A|[^\\d])0x[a-f\\d]{3,}[a-f\\d]*)+", "rule": "(?:(?:\\A|[^\\d])0x[a-f\\d]{3,}[a-f\\d]*)+" }, { "flags": "i", "original": "(?i:(\\!\\=|\\&\\&|\\|\\||>>|<<|>=|<=|<>|<=>|\\bxor\\b|\\brlike\\b|\\bregexp\\b|\\bisnull\\b)|(?:not\\s+between\\s+0\\s+and)|(?:is\\s+null)|(like\\s+null)|(?:(?:^|\\W)in[+\\s]*\$[\\s\\d\\\"]+[^()]*\$)|(?:\\bxor\\b|<>|rlike(?:\\s+binary)?)|(?:regexp\\s+binary))", "rule": "(?:(\\!\\=|\\&\\&|\\|\\||>>|<<|>=|<=|<>|<=>|\\bxor\\b|\\brlike\\b|\\bregexp\\b|\\bisnull\\b)|(?:not\\s+between\\s+0\\s+and)|(?:is\\s+null)|(like\\s+null)|(?:(?:^|\\W)in[+\\s]*\$[\\s\\d\\\"]+[^()]*\$)|(?:\\bxor\\b|<>|rlike(?:\\s+binary)?)|(?:regexp\\s+binary))" }, { "flags": "i", "original": "(?i:(sleep\$(\\s*?)(\\d*?)(\\s*?)\$|benchmark\$(.*?)\\,(.*?)\$))", "rule": "(?:(sleep\$(\\s*?)(\\d*?)(\\s*?)\$|benchmark\$(.*?)\\,(.*?)\$))" }, { "flags": "i", "original": "(?i:(?:^(-0000023456|4294967295|4294967296|2147483648|2147483647|0000012345|-2147483648|-2147483649|0000023456|2.2.90738585072007e-308|1e309)$))", "rule": "(?:(?:^(-0000023456|4294967295|4294967296|2147483648|2147483647|0000012345|-2147483648|-2147483649|0000023456|2.2.90738585072007e-308|1e309)$))" }, { "flags": "i", "original": "(?i:(?:(select|;)\\s+(?:benchmark|if|sleep)\\s*?\$\\s*?\\(?\\s*?\\w+))", "rule": "(?:(?:(select|;)\\s+(?:benchmark|if|sleep)\\s*?\\(\\s*?\\(?\\s*?\\w+))" }, { "flags": "i", "original": "(?i:(?:[\\s()]case\\s*?\\()|(?:\$\\s*?like\\s*?\$)|(?:having\\s*?[^\\s]+\\s*?[^\\w\\s])|(?:if\\s?\\([\\d\\w]\\s*?[=<>~]))", "rule": "(?:(?:[\\s()]case\\s*?\\()|(?:\$\\s*?like\\s*?\$)|(?:having\\s*?[^\\s]+\\s*?[^\\w\\s])|(?:if\\s?\\([\\d\\w]\\s*?[=<>~]))" }, { "flags": "i", "original": "(?i:(?:(union(.*?)select(.*?)from)))", "rule": "(?:(?:(union(.*?)select(.*?)from)))" }, { "flags": "i", "original": "(?i:(?:\\[\\$(?:ne|eq|lte?|gte?|n?in|mod|all|size|exists|type|slice|x?or|div|like|between|and)\\]))", "rule": "(?:(?:\\[\\$(?:ne|eq|lte?|gte?|n?in|mod|all|size|exists|type|slice|x?or|div|like|between|and)\\]))" }, { "flags": "i", "original": "(?i:(?:procedure\\s+analyse\\s*?\\()|(?:;\\s*?(declare|open)\\s+[\\w-]+)|(?:create\\s+(procedure|function)\\s*?\\w+\\s*?\\(\\s*?\$\\s*?-)|(?:declare[^\\w]+[@#]\\s*?\\w+)|(exec\\s*?\$\\s*?@))", "rule": "(?:(?:procedure\\s+analyse\\s*?\\()|(?:;\\s*?(declare|open)\\s+[\\w-]+)|(?:create\\s+(procedure|function)\\s*?\\w+\\s*?\\(\\s*?\$\\s*?-)|(?:declare[^\\w]+[@#]\\s*?\\w+)|(exec\\s*?\\(\\s*?@))" }, { "flags": "i", "original": "(?i:(?:create\\s+function\\s+\\w+\\s+returns)|(?:;\\s*?(?:select|create|rename|truncate|load|alter|delete|update|insert|desc)\\s*?[\\[(]?\\w{2,}))", "rule": "(?:(?:create\\s+function\\s+\\w+\\s+returns)|(?:;\\s*?(?:select|create|rename|truncate|load|alter|delete|update|insert|desc)\\s*?[\\[(]?\\w{2,}))" } ], "name": null }, { "element": "QueryParam", "filters": [ { "flags": "i", "original": "(?i)(<script[^>]*>[\\s\\S]*?<\\/script[^>]*>|<script[^>]*>[\\s\\S]*?<\\/script[[\\s\\S]]*[\\s\\S]|<script[^>]*>[\\s\\S]*?<\\/script[\\s]*[\\s]|<script[^>]*>[\\s\\S]*?<\\/script|<script[^>]*>[\\s\\S]*?)", "rule": "(<script[^>]*>[\\s\\S]*?<\\/script[^>]*>|<script[^>]*>[\\s\\S]*?<\\/script[[\\s\\S]]*[\\s\\S]|<script[^>]*>[\\s\\S]*?<\\/script[\\s]*[\\s]|<script[^>]*>[\\s\\S]*?<\\/script|<script[^>]*>[\\s\\S]*?)" }, { "flags": "i", "original": "(?i)([\\s\\\"'`;\\/0-9\\=]+on\\w+\\s*=)", "rule": "([\\s\\\"'`;\\/0-9\\=]+on\\w+\\s*=)" }, { "flags": "i", "original": "(?i)((?:=|U\\s*R\\s*L\\s*\\()\\s*[^>]*\\s*S\\s*C\\s*R\\s*I\\s*P\\s*T\\s*:|&colon;|[\\s\\S]allowscriptaccess[\\s\\S]|[\\s\\S]src[\\s\\S]|[\\s\\S]data:text\\/html[\\s\\S]|[\\s\\S]xlink:href[\\s\\S]|[\\s\\S]base64[\\s\\S]|[\\s\\S]xmlns[\\s\\S]|[\\s\\S]xhtml[\\s\\S]|[\\s\\S]style[\\s\\S]|<style[^>]*>[\\s\\S]*?|[\\s\\S]@import[\\s\\S]|<applet[^>]*>[\\s\\S]*?|<meta[^>]*>[\\s\\S]*?|<object[^>]*>[\\s\\S]*?)", "rule": "((?:=|U\\s*R\\s*L\\s*\\()\\s*[^>]*\\s*S\\s*C\\s*R\\s*I\\s*P\\s*T\\s*:|&colon;|[\\s\\S]allowscriptaccess[\\s\\S]|[\\s\\S]src[\\s\\S]|[\\s\\S]data:text\\/html[\\s\\S]|[\\s\\S]xlink:href[\\s\\S]|[\\s\\S]base64[\\s\\S]|[\\s\\S]xmlns[\\s\\S]|[\\s\\S]xhtml[\\s\\S]|[\\s\\S]style[\\s\\S]|<style[^>]*>[\\s\\S]*?|[\\s\\S]@import[\\s\\S]|<applet[^>]*>[\\s\\S]*?|<meta[^>]*>[\\s\\S]*?|<object[^>]*>[\\s\\S]*?)" }, { "flags": "i", "original": "(?i:<script.*?>)", "rule": "(?:<script.*?>)" }, { "flags": "i", "original": "(?i:<style.*?>.*?((@[i\\\\\\\\])|(([:=]|(&#x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\\\\\]|(&#x?0*((40)|(28)|(92)|(5C));?)))))", "rule": "(?:<style.*?>.*?((@[i\\\\\\\\])|(([:=]|(&#x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\\\\\]|(&#x?0*((40)|(28)|(92)|(5C));?)))))" }, { "flags": "i", "original": "(?i:<script.*?[ /+\\t]*?((src)|(xlink:href)|(href))[ /+\\t]*=)", "rule": "(?:<script.*?[ /+\\t]*?((src)|(xlink:href)|(href))[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<[i]?frame.*?[ /+\\t]*?src[ /+\\t]*=)", "rule": "(?:<[i]?frame.*?[ /+\\t]*?src[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<.*[:]vmlframe.*?[ /+\\t]*?src[ /+\\t]*=)", "rule": "(?:<.*[:]vmlframe.*?[ /+\\t]*?src[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:(j|(&#x?0*((74)|(4A)|(106)|(6A));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(a|(&#x?0*((65)|(41)|(97)|(61));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(v|(&#x?0*((86)|(56)|(118)|(76));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(a|(&#x?0*((65)|(41)|(97)|(61));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(s|(&#x?0*((83)|(53)|(115)|(73));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(c|(&#x?0*((67)|(43)|(99)|(63));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(r|(&#x?0*((82)|(52)|(114)|(72));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(i|(&#x?0*((73)|(49)|(105)|(69));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(p|(&#x?0*((80)|(50)|(112)|(70));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(t|(&#x?0*((84)|(54)|(116)|(74));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(:|(&((#x?0*((58)|(3A));?)|(colon;)))).)", "rule": "(?:(j|(&#x?0*((74)|(4A)|(106)|(6A));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(a|(&#x?0*((65)|(41)|(97)|(61));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(v|(&#x?0*((86)|(56)|(118)|(76));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(a|(&#x?0*((65)|(41)|(97)|(61));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(s|(&#x?0*((83)|(53)|(115)|(73));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(c|(&#x?0*((67)|(43)|(99)|(63));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(r|(&#x?0*((82)|(52)|(114)|(72));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(i|(&#x?0*((73)|(49)|(105)|(69));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(p|(&#x?0*((80)|(50)|(112)|(70));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(t|(&#x?0*((84)|(54)|(116)|(74));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(:|(&((#x?0*((58)|(3A));?)|(colon;)))).)" }, { "flags": "i", "original": "(?i:(v|(&#x?0*((86)|(56)|(118)|(76));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(b|(&#x?0*((66)|(42)|(98)|(62));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(s|(&#x?0*((83)|(53)|(115)|(73));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(c|(&#x?0*((67)|(43)|(99)|(63));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(r|(&#x?0*((82)|(52)|(114)|(72));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(i|(&#x?0*((73)|(49)|(105)|(69));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(p|(&#x?0*((80)|(50)|(112)|(70));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(t|(&#x?0*((84)|(54)|(116)|(74));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(:|(&((#x?0*((58)|(3A));?)|(colon;)))).)", "rule": "(?:(v|(&#x?0*((86)|(56)|(118)|(76));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(b|(&#x?0*((66)|(42)|(98)|(62));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(s|(&#x?0*((83)|(53)|(115)|(73));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(c|(&#x?0*((67)|(43)|(99)|(63));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(r|(&#x?0*((82)|(52)|(114)|(72));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(i|(&#x?0*((73)|(49)|(105)|(69));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(p|(&#x?0*((80)|(50)|(112)|(70));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(t|(&#x?0*((84)|(54)|(116)|(74));?))([\\t]|(&((#x?0*(9|(13)|(10)|A|D);?)|(tab;)|(newline;))))*(:|(&((#x?0*((58)|(3A));?)|(colon;)))).)" }, { "flags": "i", "original": "(?i:<EMBED[ /+\\t].*?((src)|(type)).*?=)", "rule": "(?:<EMBED[ /+\\t].*?((src)|(type)).*?=)" }, { "flags": "i", "original": "(?i:<[?]?import[ /+\\t].*?implementation[ /+\\t]*=)", "rule": "(?:<[?]?import[ /+\\t].*?implementation[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<META[ /+\\t].*?http-equiv[ /+\\t]*=[ /+\\t]*[\\\"\\'`]?(((c|(&#x?0*((67)|(43)|(99)|(63));?)))|((r|(&#x?0*((82)|(52)|(114)|(72));?)))|((s|(&#x?0*((83)|(53)|(115)|(73));?)))))", "rule": "(?:<META[ /+\\t].*?http-equiv[ /+\\t]*=[ /+\\t]*[\\\"\\'`]?(((c|(&#x?0*((67)|(43)|(99)|(63));?)))|((r|(&#x?0*((82)|(52)|(114)|(72));?)))|((s|(&#x?0*((83)|(53)|(115)|(73));?)))))" }, { "flags": "i", "original": "(?i:<META[ /+\\t].*?charset[ /+\\t]*=)", "rule": "(?:<META[ /+\\t].*?charset[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<LINK[ /+\\t].*?href[ /+\\t]*=)", "rule": "(?:<LINK[ /+\\t].*?href[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<BASE[ /+\\t].*?href[ /+\\t]*=)", "rule": "(?:<BASE[ /+\\t].*?href[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:<APPLET[ /+\\t>])", "rule": "(?:<APPLET[ /+\\t>])" }, { "flags": "i", "original": "(?i:<OBJECT[ /+\\t].*?((type)|(codetype)|(classid)|(code)|(data))[ /+\\t]*=)", "rule": "(?:<OBJECT[ /+\\t].*?((type)|(codetype)|(classid)|(code)|(data))[ /+\\t]*=)" }, { "flags": "i", "original": "(?i:[\\\"\\'].*?[,].*(((v|(\\\\\\\\u0076)|(\\\\166)|(\\\\x76))[^a-z0-9]*(a|(\\\\\\\\u0061)|(\\\\141)|(\\\\x61))[^a-z0-9]*(l|(\\\\\\\\u006C)|(\\\\154)|(\\\\x6C))[^a-z0-9]*(u|(\\\\\\\\u0075)|(\\\\165)|(\\\\x75))[^a-z0-9]*(e|(\\\\\\\\u0065)|(\\\\145)|(\\\\x65))[^a-z0-9]*(O|(\\\\\\\\u004F)|(\\\\117)|(\\\\x4F))[^a-z0-9]*(f|(\\\\\\\\u0066)|(\\\\146)|(\\\\x66)))|((t|(\\\\\\\\u0074)|(\\\\164)|(\\\\x74))[^a-z0-9]*(o|(\\\\\\\\u006F)|(\\\\157)|(\\\\x6F))[^a-z0-9]*(S|(\\\\\\\\u0053)|(\\\\123)|(\\\\x53))[^a-z0-9]*(t|(\\\\\\\\u0074)|(\\\\164)|(\\\\x74))[^a-z0-9]*(r|(\\\\\\\\u0072)|(\\\\162)|(\\\\x72))[^a-z0-9]*(i|(\\\\\\\\u0069)|(\\\\151)|(\\\\x69))[^a-z0-9]*(n|(\\\\\\\\u006E)|(\\\\156)|(\\\\x6E))[^a-z0-9]*(g|(\\\\\\\\u0067)|(\\\\147)|(\\\\x67)))).*?:)", "rule": "(?:[\\\"\\'].*?[,].*(((v|(\\\\\\\\u0076)|(\\\\166)|(\\\\x76))[^a-z0-9]*(a|(\\\\\\\\u0061)|(\\\\141)|(\\\\x61))[^a-z0-9]*(l|(\\\\\\\\u006C)|(\\\\154)|(\\\\x6C))[^a-z0-9]*(u|(\\\\\\\\u0075)|(\\\\165)|(\\\\x75))[^a-z0-9]*(e|(\\\\\\\\u0065)|(\\\\145)|(\\\\x65))[^a-z0-9]*(O|(\\\\\\\\u004F)|(\\\\117)|(\\\\x4F))[^a-z0-9]*(f|(\\\\\\\\u0066)|(\\\\146)|(\\\\x66)))|((t|(\\\\\\\\u0074)|(\\\\164)|(\\\\x74))[^a-z0-9]*(o|(\\\\\\\\u006F)|(\\\\157)|(\\\\x6F))[^a-z0-9]*(S|(\\\\\\\\u0053)|(\\\\123)|(\\\\x53))[^a-z0-9]*(t|(\\\\\\\\u0074)|(\\\\164)|(\\\\x74))[^a-z0-9]*(r|(\\\\\\\\u0072)|(\\\\162)|(\\\\x72))[^a-z0-9]*(i|(\\\\\\\\u0069)|(\\\\151)|(\\\\x69))[^a-z0-9]*(n|(\\\\\\\\u006E)|(\\\\156)|(\\\\x6E))[^a-z0-9]*(g|(\\\\\\\\u0067)|(\\\\147)|(\\\\x67)))).*?:)" }, { "flags": "i", "original": "(?i:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?\$.*?\$)", "rule": "(?:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?\$.*?\$)" }, { "flags": "i", "original": "(?i:[\\\"\\'].*?\\)[ ]*(([^a-z0-9~_:\\' ])|(in)).+?\$)", "rule": "(?:[\\\"\\'].*?\$[ ]*(([^a-z0-9~_:\\' ])|(in)).+?\\()" }, { "flags": "i", "original": "(?i:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?[.].+?=)", "rule": "(?:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?[.].+?=)" }, { "flags": "i", "original": "(?i:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?[\\[].*?[\\]].*?=)", "rule": "(?:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).+?[\\[].*?[\\]].*?=)" }, { "flags": "i", "original": "(?i:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).*?(((l|(\\\\\\\\u006C))(o|(\\\\\\\\u006F))(c|(\\\\\\\\u0063))(a|(\\\\\\\\u0061))(t|(\\\\\\\\u0074))(i|(\\\\\\\\u0069))(o|(\\\\\\\\u006F))(n|(\\\\\\\\u006E)))|((n|(\\\\\\\\u006E))(a|(\\\\\\\\u0061))(m|(\\\\\\\\u006D))(e|(\\\\\\\\u0065)))|((o|(\\\\\\\\u006F))(n|(\\\\\\\\u006E))(e|(\\\\\\\\u0065))(r|(\\\\\\\\u0072))(r|(\\\\\\\\u0072))(o|(\\\\\\\\u006F))(r|(\\\\\\\\u0072)))|((v|(\\\\\\\\u0076))(a|(\\\\\\\\u0061))(l|(\\\\\\\\u006C))(u|(\\\\\\\\u0075))(e|(\\\\\\\\u0065))(O|(\\\\\\\\u004F))(f|(\\\\\\\\u0066)))).*?=)", "rule": "(?:[\\\"\\'][ ]*(([^a-z0-9~_:\\' ])|(in)).*?(((l|(\\\\\\\\u006C))(o|(\\\\\\\\u006F))(c|(\\\\\\\\u0063))(a|(\\\\\\\\u0061))(t|(\\\\\\\\u0074))(i|(\\\\\\\\u0069))(o|(\\\\\\\\u006F))(n|(\\\\\\\\u006E)))|((n|(\\\\\\\\u006E))(a|(\\\\\\\\u0061))(m|(\\\\\\\\u006D))(e|(\\\\\\\\u0065)))|((o|(\\\\\\\\u006F))(n|(\\\\\\\\u006E))(e|(\\\\\\\\u0065))(r|(\\\\\\\\u0072))(r|(\\\\\\\\u0072))(o|(\\\\\\\\u006F))(r|(\\\\\\\\u0072)))|((v|(\\\\\\\\u0076))(a|(\\\\\\\\u0061))(l|(\\\\\\\\u006C))(u|(\\\\\\\\u0075))(e|(\\\\\\\\u0065))(O|(\\\\\\\\u004F))(f|(\\\\\\\\u0066)))).*?=)" }, { "flags": "i", "original": "(?i:<form.*?>)", "rule": "(?:<form.*?>)" }, { "flags": "i", "original": "(?i:<isindex[ /+\\t>])", "rule": "(?:<isindex[ /+\\t>])" }, { "flags": "i", "original": "(?i:[ /+\\t\\\"\\'`]style[ /+\\t]*?=.*([:=]|(&#x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\\\\\]|(&#x?0*((40)|(28)|(92)|(5C));?)))", "rule": "(?:[ /+\\t\\\"\\'`]style[ /+\\t]*?=.*([:=]|(&#x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\\\\\]|(&#x?0*((40)|(28)|(92)|(5C));?)))" }, { "flags": "i", "original": "(?i:[ /+\\t\\\"\\'`]on\\[a-z]\\[a-z]\\[a-z]+?[ +\\t]*?=.)", "rule": "(?:[ /+\\t\\\"\\'`]on\\[a-z]\\[a-z]\\[a-z]+?[ +\\t]*?=.)" }, { "flags": "i", "original": "(?i:[ /+\\t\\\"\\'`]datasrc[ +\\t]*?=.)", "rule": "(?:[ /+\\t\\\"\\'`]datasrc[ +\\t]*?=.)" }, { "flags": "", "original": "(/\\*!?|\\*/|[';]--|--[\\s\\r\\n\\v\\f]|(?:--[^-]*?-)|([^\\-&])#.*?[\\s\\r\\n\\v\\f]|;?\\\\x00)", "rule": "(/\\*!?|\\*/|[';]--|--[\\s\\r\\n\\v\\f]|(?:--[^-]*?-)|([^\\-&])#.*?[\\s\\r\\n\\v\\f]|;?\\\\x00)" }, { "flags": "i", "original": "(?i:(?:\\A|[^\\d])0x[a-f\\d]{3,}[a-f\\d]*)+", "rule": "(?:(?:\\A|[^\\d])0x[a-f\\d]{3,}[a-f\\d]*)+" }, { "flags": "i", "original": "(?i:(\\!\\=|\\&\\&|\\|\\||>>|<<|>=|<=|<>|<=>|\\bxor\\b|\\brlike\\b|\\bregexp\\b|\\bisnull\\b)|(?:not\\s+between\\s+0\\s+and)|(?:is\\s+null)|(like\\s+null)|(?:(?:^|\\W)in[+\\s]*\$[\\s\\d\\\"]+[^()]*\$)|(?:\\bxor\\b|<>|rlike(?:\\s+binary)?)|(?:regexp\\s+binary))", "rule": "(?:(\\!\\=|\\&\\&|\\|\\||>>|<<|>=|<=|<>|<=>|\\bxor\\b|\\brlike\\b|\\bregexp\\b|\\bisnull\\b)|(?:not\\s+between\\s+0\\s+and)|(?:is\\s+null)|(like\\s+null)|(?:(?:^|\\W)in[+\\s]*\$[\\s\\d\\\"]+[^()]*\$)|(?:\\bxor\\b|<>|rlike(?:\\s+binary)?)|(?:regexp\\s+binary))" }, { "flags": "i", "original": "(?i:(sleep\$(\\s*?)(\\d*?)(\\s*?)\$|benchmark\$(.*?)\\,(.*?)\$))", "rule": "(?:(sleep\$(\\s*?)(\\d*?)(\\s*?)\$|benchmark\$(.*?)\\,(.*?)\$))" }, { "flags": "i", "original": "(?i:(?:^(-0000023456|4294967295|4294967296|2147483648|2147483647|0000012345|-2147483648|-2147483649|0000023456|2.2.90738585072007e-308|1e309)$))", "rule": "(?:(?:^(-0000023456|4294967295|4294967296|2147483648|2147483647|0000012345|-2147483648|-2147483649|0000023456|2.2.90738585072007e-308|1e309)$))" }, { "flags": "i", "original": "(?i:(?:(select|;)\\s+(?:benchmark|if|sleep)\\s*?\$\\s*?\\(?\\s*?\\w+))", "rule": "(?:(?:(select|;)\\s+(?:benchmark|if|sleep)\\s*?\\(\\s*?\\(?\\s*?\\w+))" }, { "flags": "i", "original": "(?i:(?:[\\s()]case\\s*?\\()|(?:\$\\s*?like\\s*?\$)|(?:having\\s*?[^\\s]+\\s*?[^\\w\\s])|(?:if\\s?\\([\\d\\w]\\s*?[=<>~]))", "rule": "(?:(?:[\\s()]case\\s*?\\()|(?:\$\\s*?like\\s*?\$)|(?:having\\s*?[^\\s]+\\s*?[^\\w\\s])|(?:if\\s?\\([\\d\\w]\\s*?[=<>~]))" }, { "flags": "i", "original": "(?i:(?:(union(.*?)select(.*?)from)))", "rule": "(?:(?:(union(.*?)select(.*?)from)))" }, { "flags": "i", "original": "(?i:(?:\\[\\$(?:ne|eq|lte?|gte?|n?in|mod|all|size|exists|type|slice|x?or|div|like|between|and)\\]))", "rule": "(?:(?:\\[\\$(?:ne|eq|lte?|gte?|n?in|mod|all|size|exists|type|slice|x?or|div|like|between|and)\\]))" }, { "flags": "i", "original": "(?i:(?:procedure\\s+analyse\\s*?\\()|(?:;\\s*?(declare|open)\\s+[\\w-]+)|(?:create\\s+(procedure|function)\\s*?\\w+\\s*?\\(\\s*?\$\\s*?-)|(?:declare[^\\w]+[@#]\\s*?\\w+)|(exec\\s*?\$\\s*?@))", "rule": "(?:(?:procedure\\s+analyse\\s*?\\()|(?:;\\s*?(declare|open)\\s+[\\w-]+)|(?:create\\s+(procedure|function)\\s*?\\w+\\s*?\\(\\s*?\$\\s*?-)|(?:declare[^\\w]+[@#]\\s*?\\w+)|(exec\\s*?\\(\\s*?@))" }, { "flags": "i", "original": "(?i:(?:create\\s+function\\s+\\w+\\s+returns)|(?:;\\s*?(?:select|create|rename|truncate|load|alter|delete|update|insert|desc)\\s*?[\\[(]?\\w{2,}))", "rule": "(?:(?:create\\s+function\\s+\\w+\\s+returns)|(?:;\\s*?(?:select|create|rename|truncate|load|alter|delete|update|insert|desc)\\s*?[\\[(]?\\w{2,}))" } ], "name": ".*" } ]