Request Parameter Restriction

Pattern match with regular expressions against a request parameter.

The value of this parameter must follow this pattern:

{Parameter Name}={Parameter Value Regex}

I.e. it must be the name of the request parameter, followed by and equal sign, followed by a regular epression to match against the named parameter's value.

For an example, consider the following URL:

https://example.com/webapps/blackboard/execute/blogTopicList?mode=read&course_id=_2492_1&type=blogs

Restriction injection to only those requests related to blogs:

Or, using regular expressions, inject into blogs and journals:

Example

An example of a package that uses this type of restriction is the Availability Scroller package which uses a request parameter to ensure that the scrolling script is only injected when sent from the Availability Notice package.