{
  "XssMatchSetId": "xx",
  "ChangeToken": "xx",
  "Updates": [
    {
      "Action": "INSERT",
      "XssMatchTuple": {
        "TextTransformation": "URL_DECODE",
        "FieldToMatch": {
          "Type": "URI"
        }
      }
    },
    {
      "Action": "INSERT",
      "XssMatchTuple": {
        "TextTransformation": "URL_DECODE",
        "FieldToMatch": {
          "Type": "BODY"
        }
      }
    },
    {
      "Action": "INSERT",
      "XssMatchTuple": {
        "TextTransformation": "HTML_ENTITY_DECODE",
        "FieldToMatch": {
          "Type": "URI"
        }
      }
    },
    {
      "Action": "INSERT",
      "XssMatchTuple": {
        "TextTransformation": "HTML_ENTITY_DECODE",
        "FieldToMatch": {
          "Type": "BODY"
        }
      }
    },
    {
      "Action": "INSERT",
      "XssMatchTuple": {
        "TextTransformation": "URL_DECODE",
        "FieldToMatch": {
          "Data": "cookie",
          "Type": "HEADER"
        }
      }
    },
    {
      "Action": "INSERT",
      "XssMatchTuple": {
        "TextTransformation": "URL_DECODE",
        "FieldToMatch": {
          "Type": "QUERY_STRING"
        }
      }
    },
    {
      "Action": "INSERT",
      "XssMatchTuple": {
        "TextTransformation": "HTML_ENTITY_DECODE",
        "FieldToMatch": {
          "Data": "cookie",
          "Type": "HEADER"
        }
      }
    },
    {
      "Action": "INSERT",
      "XssMatchTuple": {
        "TextTransformation": "HTML_ENTITY_DECODE",
        "FieldToMatch": {
          "Type": "QUERY_STRING"
        }
      }
    }
  ]
}