Citrix ADC 12.1 NITRO API Reference

appfwprofile_xmlsqlinjection_binding

August 17, 2023

Contributed by:

Binding object showing the xmlsqlinjection that can be bound to appfwprofile.

Properties

(click to see Operations)

Name	Permissions	Description
as_scan_location_xmlsql	Read-write	Location of SQL injection exception - XML Element or Attribute. Possible values = ELEMENT, ATTRIBUTE
state	Read-write	Enabled. Possible values = ENABLED, DISABLED
name	Read-write	Name of the profile to which to bind an exemption or rule. Minimum length = 1
xmlsqlinjection	Read-write	Exempt the specified URL from the XML SQL injection check. An XML SQL injection exemption (relaxation) consists of the following items: * Name. Name to exempt, as a string or a PCRE-format regular expression. * ISREGEX flag. REGEX if URL is a regular expression, NOTREGEX if URL is a fixed string. * Location. ELEMENT if the injection is located in an XML element, ATTRIBUTE if located in an XML attribute.
isregex_xmlsql	Read-write	Is the XML SQL Injection exempted field name a regular expression?. Possible values = REGEX, NOTREGEX
comment	Read-write	Any comments about the purpose of profile, or other useful information about the profile.
__count	Read-write	count parameter

Operations

(click to see Properties)

Some options that you can use for each operations:

Getting warnings in response:NITRO allows you to get warnings in an operation by specifying the "warning" query parameter as "yes". For example, to get warnings while connecting to the Citrix ADC appliance, the URL is as follows:

http://<Citrix-ADC-IP-address(NSIP)>/nitro/v1/config/login?warning=yes

If any, the warnings are displayed in the response payload with the HTTP code "209 X-NITRO-WARNING".
Authenticated access for individual NITRO operations:NITRO allows you to logon to the Citrix ADC appliance to perform individual operations. You can use this option instead of creating a NITRO session (using the login object) and then using that session to perform all operations,

To do this, you must specify the username and password in the request header of the NITRO request as follows:

X-NITRO-USER:<username>

X-NITRO-PASS:<password>

Note:In such cases, make sure that the request header DOES not include the following:

Cookie:NITRO_AUTH_TOKEN=<tokenvalue>

*Note:*

Mandatory parameters are marked in redand placeholder content is marked in <green>.

add

URL:http://<Citrix-ADC-IP-address(NSIP)/nitro/v1/config/appfwprofile_xmlsqlinjection_binding

HTTP Method:PUT

Request Headers:

Cookie:NITRO_AUTH_TOKEN=<tokenvalue> Content-Type:application/json

Request Payload:

{
"appfwprofile_xmlsqlinjection_binding":{
<b>"name":<String_value>,
</b>"comment":<String_value>,
"state":<String_value>,
"xmlsqlinjection":<String_value>,
"isregex_xmlsql":<String_value>,
"as_scan_location_xmlsql":<String_value>
}}

<!--NeedCopy-->

Response:

HTTP Status Code on Success: 201 Created HTTP Status Code on Failure: 4xx <string> (for general HTTP errors) or 5xx <string> (for Citrix ADC specific errors). The response payload provides details of the error

delete

URL:http://<Citrix-ADC-IP-address(NSIP)>/nitro/v1/config/appfwprofile_xmlsqlinjection_binding/name_value<String>

Query-parameters:

args

http://<Citrix-ADC-IP-address(NSIP)>/nitro/v1/config/appfwprofile_xmlsqlinjection_binding/name_value<String>?args=xmlsqlinjection:<String_value>,as_scan_location_xmlsql:<String_value>

HTTP Method:DELETE

Request Headers:

Cookie:NITRO_AUTH_TOKEN=<tokenvalue>

Response:

HTTP Status Code on Success: 200 OK HTTP Status Code on Failure: 4xx <string> (for general HTTP errors) or 5xx <string> (for Citrix ADC specific errors). The response payload provides details of the error

get

URL:http://<Citrix-ADC-IP-address(NSIP)>/nitro/v1/config/appfwprofile_xmlsqlinjection_binding/name_value<String>

Query-parameters:

filter

http://<Citrix-ADC-IP-address(NSIP)>/nitro/v1/config/appfwprofile_xmlsqlinjection_binding/name_value<String>?filter=property-name1:property-value1,property-name2:property-value2

Use this query-parameter to get the filtered set of appfwprofile_xmlsqlinjection_binding resources configured on Citrix ADC. Filtering can be done on any of the properties of the resource.

pagination

http://<Citrix-ADC-IP-address(NSIP)>/nitro/v1/config/appfwprofile_xmlsqlinjection_binding/name_value<String>?pagesize=#no;pageno=#no

Use this query-parameter to get the appfwprofile_xmlsqlinjection_binding resources in chunks.

HTTP Method:GET

Request Headers:

Cookie:NITRO_AUTH_TOKEN=<tokenvalue> Accept:application/json

Response:

Content-Type:application/json

Response Payload:

{ "appfwprofile_xmlsqlinjection_binding": [ {
"as_scan_location_xmlsql":<String_value>,
"state":<String_value>,
"name":<String_value>,
"xmlsqlinjection":<String_value>,
"isregex_xmlsql":<String_value>,
"comment":<String_value>
}]}

<!--NeedCopy-->

get (all)

URL:http://<Citrix-ADC-IP-address(NSIP)>/nitro/v1/config/appfwprofile_xmlsqlinjection_binding

Query-parameters:

bulkbindings

http://<Citrix-ADC-IP-address(NSIP)>/nitro/v1/config/appfwprofile_xmlsqlinjection_binding?bulkbindings=yes

NITRO allows you to fetch bindings in bulk.

HTTP Method:GET

Request Headers:

Cookie:NITRO_AUTH_TOKEN=<tokenvalue> Accept:application/json

Response:

Content-Type:application/json

Response Payload:

{ "appfwprofile_xmlsqlinjection_binding": [ {
"as_scan_location_xmlsql":<String_value>,
"state":<String_value>,
"name":<String_value>,
"xmlsqlinjection":<String_value>,
"isregex_xmlsql":<String_value>,
"comment":<String_value>
}]}

<!--NeedCopy-->

count

URL:http://<Citrix-ADC-IP-address(NSIP)>/nitro/v1/config/appfwprofile_xmlsqlinjection_binding/name_value<String>?count=yes

HTTP Method:GET

Request Headers:

Cookie:NITRO_AUTH_TOKEN=<tokenvalue> Accept:application/json

Response:

Content-Type:application/json

Response Payload:

{"appfwprofile_xmlsqlinjection_binding": [ { "__count": "#no"} ] }

<!--NeedCopy-->

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

appfwprofile_xmlsqlinjection_binding

August 17, 2023

Contributed by:

August 17, 2023

Contributed by:

appfwprofile_xmlsqlinjection_binding

Properties

Operations

add

delete

get

get (all)

count

In this article