Update a Client-Side Protection configuration

put

https://{hostname}/appsec/v1/configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/client-side-protection

All products Creates or updates the Client-Side Protection configuration for a security policy. If no configuration exists for the policy, it is created. If one exists, it is updated. The enabled state is managed separately via the protections toggle.

Path Params

configId

int64

required

A unique identifier for each configuration.

versionNumber

integer

required

A unique identifier for each version of a configuration.

policyId

string

required

A unique identifier for a security policy.

Query Params

accountSwitchKey

string

For customers who manage more than one account, this runs the operation from another account. The Identity and Access Management API provides a list of available account switch keys.

Body Params

Configuration settings for Client-Side Protection.

edgeInjection

object

required

Specifies the Client-Side Protection JavaScript injection settings.

edgeTestParameters

object

required

Use these query string parameters to unit test edge server behavior. Entries here override the sampling percentage, ensuring or disabling JavaScript injection.

injectionCriteria

object

required

Specifies the criteria for script injection.

Headers

string

enum

Defaults to application/json

Generated from available response content types

Allowed:

Responses

200The response reflects the updated Client-Side Protection configuration.

400Bad request. Invalid request body or URL parameter input.

403Forbidden. You don't have access to the resource.

404Not found. That resource doesn't exist, or the URL is malformed.