I want to increase the security of one of our Magento2 installations by filtering GET parameters. It seems that, according to our WAF, especially "filter" parameters are often tried to be exploited; for example:
This happens, no matter if filters are used on the website or not. I therefore want to block all requests to
?product_filter_tryout*, or better whitelist all actually used parameters on the site (like
?p=* etc.). How can I achieve this?