In the Value Expression field, enter the expression, as a substring or regular From the Type list, select to base the match evaluation on the substring or

4-14 Oracle Fusion Middleware Administrators Guide for Oracle Web Cache See Section 4.2 for further information about the query-string request filter. To configure rules for the query string request filter: 1. Navigate to the Web Cache Home page in Fusion Middleware Control. See Section 2.6.2 .

2. From the Web Cache menu, select Administration and then Request Filters.

The Request Filters Summary page displays.

3. From the Site list, select the site to apply the filter. See

Section 2.11.3 and Section 2.11.4 to create additional sites. You can configure filters and filter rules for specific sites or Undefined Sites. Oracle Web Cache directs client requests that do not match a defined site to the request filters configured for Undefined Sites.

4. Click the Query String link.

The Query String Request Filter page displays.

5. From the Audit list, select the level of action for Oracle Web Cache to include in its

audit log for the request filter.

6. From the Response to deny list, select the HTTP response for Oracle Web Cache to

return to browsers for requests that are denied by this request filter. The Close Connection option does not return any HTTP responses. It just closes the connection. 7. Create a new rule:

a. Click Create to create a row in the table.

b. In the Query String Expression field, enter the query string, as a substring or

regular expression, to compare against an incoming request.

c. Click the Enable check box to enable the rule; deselect the check box to disable

the rule temporarily without losing the rule definition.

d. From the Type list, select to base the match evaluation on the substring or

regular expression in the Query String Expression field. e. Click the Match If Found check box for Oracle Web Cache to match incoming requests in which the query string matches the substring or regular expression specified in the Value Expression field. If there is a match with a request and the rule is enabled, the filter denies the request. Do not select the Match If Found check box for Oracle Web Cache to match incoming requests in which the query string does not match the substring or regular expression specified in the Value Expression field. Oracle Web Cache denies the request only if the string or expression is not found, meaning that the request is allowed if the string is found. For example, if you specify a rule with a Query String Expression of abc, Type of substring, and do not select the Match If Found check box, the filter would deny a request which did not contain the string abc in the query string or POST body. It would allow a request which contains the string abc. You can create multiple rules to allow requests with a certain string and deny requests with another string. For example, if you specify a second rule with a Query String Expression of def, Type of substring, and click the Match If Found check box, the filter would allow a request with abc in the query string but would deny a request with def in the query string.