Last update:2025-09-15 18:15:29
Explanation of Ajax request exceptions:
The JavaScript files distributed to clients for Web Bot Detection will continuously verify Ajax requests by dynamically adding URI Tokens. Since Ajax requests are not cached by default, this may lead to repeated requests and increased network bandwidth usage. Therefore, the system exempts such requests by default. This decision balances security and cost. If you wish to enhance the security of such requests, you may remove the Ajax request exemption. However, if your website enforces strict validation on URL parameters, it is not recommended to remove the Ajax request exemption.
For other application requests that you do not wish to be handled by Web Risk Detection, you can customize and configure exception rules.
Note: If your website receives requests from the following clients, please configure exceptions in the application request whitelist based on request characteristics before enabling Web Risk Detection to prevent false positives that may affect normal business operations.
- Native APP
- Native Mini Program
- Third-party Application API Calls
to enter the Security Policy editing page.