From 3000a445ab0bf4a652ccd516e998d829a1bee581 Mon Sep 17 00:00:00 2001
From: Romain Marcadier <romain@datadoghq.com>
Date: Wed, 2 Apr 2025 13:50:01 +0200
Subject: [PATCH] feat: update embedded rules to v1.14.2

---
 appsec/embed.go   |  4 ++--
 appsec/rules.json | 10 +++++++---
 2 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/appsec/embed.go b/appsec/embed.go
index f2a6298..ac8bea8 100644
--- a/appsec/embed.go
+++ b/appsec/embed.go
@@ -7,8 +7,8 @@ package appsec
 
 import _ "embed" // Blank import comment for golint compliance
 
-// StaticRecommendedRules holds the recommended AppSec security rules (v1.14.1)
-// Source: https://github.com/DataDog/appsec-event-rules/blob/1.14.1/build/recommended.json
+// StaticRecommendedRules holds the recommended AppSec security rules (v1.14.2)
+// Source: https://github.com/DataDog/appsec-event-rules/blob/1.14.2/build/recommended.json
 //
 //go:embed rules.json
 var StaticRecommendedRules string
diff --git a/appsec/rules.json b/appsec/rules.json
index ca182bf..e2216bb 100644
--- a/appsec/rules.json
+++ b/appsec/rules.json
@@ -1,7 +1,7 @@
 {
   "version": "2.2",
   "metadata": {
-    "rules_version": "1.14.1"
+    "rules_version": "1.14.2"
   },
   "rules": [
     {
@@ -5503,9 +5503,13 @@
                   "x-middleware-subrequest"
                 ]
               }
-            ]
+            ],
+            "regex": ".*",
+            "options": {
+              "min_length": 1
+            }
           },
-          "operator": "exists"
+          "operator": "match_regex"
         },
         {
           "parameters": {