The service can return specific HTTP responses directly to the client under defined conditions, including custom error responses, without forwarding the request to a backend target.
Custom Response
CCC.LB.CP18
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.LB.TH11 | Routing Rules Direct Requests to Unintended Destinations | Path, host or header routing rules, redirects, rewrites and fixed responses may be misordered, overly broad, or modified without authorization. Requests are then forwarded to the wrong backend, redirected to an external destination, or answered with attacker-controlled content. This exposes internal services and compromises the confidentiality and integrity of user sessions and data. |