To add the white list for the AJAX Request:
It's recommended to put the user input fields and the AJAX requests into different rules, because the POST URL for them is usually not the same. The AJAX request rule only checks the Request URL, and it doesn't involve POST URLs, so the POST URL of the AJAX request rule should be set as "/*" to match any URLs. |
Related Topic: