cds-snc / cds-snc/platform-forms-client
Add specificity to WAF blocking detection/alarms
Open
incident
- Dominant language
- TypeScript
- Stars
- 46
- Forks
- 16
- Avg merge
- 1d 8h
- Merged PRs (30d)
- 85
Description
**From incident: [#2025-05-22-multiple-users-blocked](https://docs.google.com/document/d/1keb-FOK1U50c87tB5iSZnXPAq_haxImdbWtM9HLRzE0/edit?tab=t.0)**
## Context
Improve Slack messages when an IP address gets blocked. Wonder if we could not leverage whois to also tag what domain is associated to it
Consider alarm based on differentiation between legit traffic vs. fuzzing traffic, ratio or percentage of good and bad requests
Contributor guide
Assessment
This issue has not been assessed yet.