Updated on 2025-07-04 GMT+08:00

Restrictions on Response Fields

There are some restrictions on the following response fields.

Field

Restriction

Response Length

  • Response detection occurs after the response header is returned. The response header cannot be modified when it is blocked.
  • A response body returned from the origin server may be included in protection events. As the response body is streamed, WAF cannot change it once it has been sent.

Response Time

Response Header

WAF checks responses after response headers are returned. If WAF needs to block responses, response headers cannot be changed.

Response Body

For more details, see Condition Field Description.