rules:
- rule:
    danger_files: 89100
    description: Header redirection block
    detection: c:n|
    file_op_name: r:Location\:\shttp
    funcname: header
    id: 89100
    script: '*'