Skip to content
Myra Online Help Updated · 21 Aug 2026

Matching encoded paths

A WAF rule with the Path condition allows you to decode the path before matching in order to bypass obfuscation through URL encoding. To do so, use the (:decode) prefix. The format is (:decode)REGEXEXPRESSION.

example_decode_path_EN

Condition: Decode and match an encoded path

For example, proceed as follows to decode paths:

  • ► Select Request as the request method.
  • ► Add the Path condition.
  • ► Select the REGEX operator from the drop-down list.
  • ► Enter (:decode).*(').* as the value.
    (decodes the path and matches, for example, an encoded single quotation mark).