OptionalmodeOptionalblockDefault blocked patterns for dangerous operations
OptionalonCallback when a query is blocked
OptionalonCallback when a query is allowed
OptionalmaxMaximum blocked queries to keep in history
OptionallogLog all queries (including allowed)
OptionalcaseEnable case-insensitive matching
OptionalrulesCustom rules to apply at startup
OptionalframeworksActive compliance frameworks for auto-configuration
Firewall mode: allowlist (only allow matching), blocklist (block matching), strict (both)