http.request.uri.path — Last URI Segment

string

In the console: Last URI Segment

Carries the last segment of the path, not the full path: for a request to /admin/login its value is /login, for /api/v2/users it is /users. Use it to target a file or endpoint name regardless of which directory it lives in.

Use base_uri for the full path

Directory-based conditions like has_prefix /admin do not work with this field — for a request to /admin/login the field value is /login, so the condition never matches. To work on the full path, use http.request.base_uri.

Supported Operators

Operator	Description
==	Exact match
!=	Not equal
in	In list
not_in	Not in list
contains	Contains
not_contains	Does not contain
has_prefix	Starts with
has_not_prefix	Does not start with
has_suffix	Ends with
has_not_suffix	Does not end with

Examples

# Block PHP files in any directory
IF   http.request.uri.path has_suffix .php
THEN block

# Rate limit login endpoints at every level (/login, /admin/login...)
IF   http.request.uri.path == /login
THEN ratelimit 10/60s

Related

• http.request.base_uri →
• http.request.uri →
• http.host →