Azure 前门 WAF 正在阻止 .AspNet.ApplicationCookie

防护 Web 应用程序安全是现代互联网世界中至关重要的任务。为了保护用户和数据安全，微软 Azure 平台提供了一种称为前门 Web 应用程序防火墙（WAF）的服务。WAF 可以帮助开发人员和企业保护其 Web 应用程序免受常见的网络攻击，例如跨站脚本（XSS）和SQL 注入。

powershell
$resourceGroup = "your-resource-group"
$wafName = "your-waf-name"
$ruleName = "AllowAspNetApplicationCookie"
$condition = "RequestCookieNames['.AspNet.ApplicationCookie']"
$action = "Allow"
$ruleJson = @{
    "name" = $ruleName
    "priority" = 1
    "ruleType" = "MatchRule"
    "matchConditions" = @(
        @{
            "field" = "Cookie"
            "Operator" = "Equal"
            "negationCondition" = $false
            "matchValues" = @($condition)
        }
    )
    "action" = @{
        "type" = "Block"
    }
} | ConvertTo-Json
Set-AzApplicationGatewayWebApplicationFirewallCustomRule -ResourceGroupName $resourceGroup -ApplicationGatewayName $wafName -RuleSetName "OWASP" -Rule $ruleJson