cscli appsec-configs install crowdsecurity/appsec-bot-challenge-exclude-api1name: crowdsecurity/appsec-bot-challenge-exclude-api2# Let programmatic/API endpoints through without a challenge: it would break with legitimate clients3# that cannot solve the challenge.4# Do not edit this file to add your own exclusions, create a custom config.5inband:6 pre_eval:7 - filter: >-8 req.URL.Path in ['/api', '/graphql'] ||9 req.URL.Path startsWith '/api/' || req.URL.Path startsWith '/wp-json/' ||10 req.URL.Path startsWith '/graphql/' || req.URL.Path startsWith '/rest/' ||11 req.URL.Path startsWith '/v1/' || req.URL.Path startsWith '/v2/' ||12 req.URL.Path startsWith '/oauth/' || req.URL.Path startsWith '/.netlify/functions/' ||13 req.URL.Path startsWith '/_next/data/'14 apply:15 - ExemptFromChallenge("api")16