evera

<AssignMessage name="create1">
<AssignTo type="[request]/response" createNew="[true]/false">sc.request</AssignTo>
<IgnoreUnresolvedVariables>true/[false]</IgnoreUnresolvedVariables>

// allow any order
<Copy source="request"> // if no children do copy all
    <Headers>
        <Header name="h1"/>
        <Header name="h2"/>
    </Headers>

evera

<XMLThreatProtection name="mypolicy">
    <Source>request</Source>
    <StructureLimits>
        <NodeDepth>5</NodeDepth>
        <AttributeCountPerElement>3</AttributeCountPerElement>
        <NamespaceCountPerElement>2</NamespaceCountPerElement>
        <ChildCount includeText="true"
                    includeComment="true"
                    includeProcessingInstruction="true"
                    includeElement="true">3</ChildCount>