I want to know how WAF/IDS/IPS deals with Payload Transformations. Such payload transformations may be
- url Encode
- Remove whitespaces
I want to know how WAF/IDS/IPS deals with payload transformation Pipelines. Such as when multiple/different payload transformation are performed on the payload. Whats WAF/IDS/IPD inherent behavior to deal with such transformation i.e. how many time "URL-decode" is performed for triple URL encoded string (' or 1=1 --). More ever if different different Payload transformation are applied then what will be the behavior of WAF/IPS/IDS?