{"id":2507,"date":"2026-09-19T17:30:00","date_gmt":"2026-09-19T14:30:00","guid":{"rendered":"https:\/\/narhost.com\/blog\/?p=2507"},"modified":"2026-09-17T19:06:12","modified_gmt":"2026-09-17T16:06:12","slug":"waf-gerekir-mi","status":"publish","type":"post","link":"https:\/\/narhost.com\/blog\/waf-gerekir-mi\/","title":{"rendered":"WAF (Web Application Firewall) Gerekir mi, Ne Zaman \u015eart"},"content":{"rendered":"<div id=\"ai-ozet\" class=\"ai-box\">\n<p class=\"ai-box-title\">K\u0131saca \u00f6zet<\/p>\n<ul>\n<li>WAF gerekir mi sorusunun k\u0131sa cevab\u0131: SQL enjeksiyonu, XSS ve k\u00f6t\u00fc bot trafi\u011fi gibi uygulama katman\u0131 sald\u0131r\u0131lar\u0131n\u0131 iste\u011fin i\u00e7eri\u011fine bakarak s\u00fczen bir g\u00fcvenlik katman\u0131na, \u00f6zellikle giri\u015f formu ve \u00f6deme sayfas\u0131 olan sitelerde ihtiya\u00e7 vard\u0131r.<\/li>\n<li>A\u011f g\u00fcvenlik duvar\u0131 IP ve port seviyesinde \u00e7al\u0131\u015f\u0131r; WAF ise HTTP iste\u011finin g\u00f6vdesini ve parametrelerini inceler, ikisi birbirinin yerini tutmaz.<\/li>\n<li>Sunucu taraf\u0131 WAF (ModSecurity gibi bir mod\u00fcl) sunucu kayna\u011f\u0131n\u0131 kullan\u0131r ve kural seti sunucuya y\u00fcklenir; bulut\/CDN WAF trafi\u011fi siteye ula\u015fmadan \u00f6nce ayr\u0131 bir katmanda s\u00fczer.<\/li>\n<li>Agresif bir kural seti me\u015fru ziyaret\u00e7iyi de engelleyebilir; yeni kurallar \u00f6nce izleme modunda test edilmeden devreye al\u0131nmamal\u0131d\u0131r.<\/li>\n<li>Form bar\u0131nd\u0131rmayan sabit bir tan\u0131t\u0131m sitesinde WAF \u00f6ncelik de\u011fildir; giri\u015f formu, \u00fcyelik ya da \u00f6deme ad\u0131m\u0131 olan sitelerde \u00f6ncelik s\u0131ras\u0131 de\u011fi\u015fir.<\/li>\n<li>Narhost&#8217;un web hosting altyap\u0131s\u0131nda sunucu d\u00fczeyinde Imunify360 bulunur; m\u00fc\u015fteriye a\u00e7\u0131k, kural baz\u0131nda ayarlanabilir bir WAF paneli \u00fcr\u00fcn sayfas\u0131nda yer almaz.<\/li>\n<\/ul>\n<\/div>\n<p>Bir e-ticaret sitesi sahibi g\u00fcvenlik denetiminde &#8220;WAF eksik&#8221; uyar\u0131s\u0131 ald\u0131\u011f\u0131nda ilk soru \u015fu olur: WAF gerekir mi, yoksa mevcut \u00f6nlemler yeterli mi? Cevap sitenin i\u015flevine g\u00f6re de\u011fi\u015fir. Bu yaz\u0131da WAF&#8217;\u0131n hangi sald\u0131r\u0131lar\u0131 engelledi\u011fini, a\u011f g\u00fcvenlik duvar\u0131ndan nas\u0131l ayr\u0131ld\u0131\u011f\u0131n\u0131, sunucu taraf\u0131 ile bulut\/CDN se\u00e7enekleri aras\u0131ndaki fark\u0131 ve hangi sitelerde ger\u00e7ekten \u015fart oldu\u011funu anlat\u0131yoruz.<\/p>\n<h2>WAF Nedir, Hangi Sald\u0131r\u0131lar\u0131 Engeller<\/h2>\n<p>WAF (Web Application Firewall), bir web uygulamas\u0131na gelen HTTP isteklerini i\u00e7erik seviyesinde inceleyen ve bilinen sald\u0131r\u0131 kal\u0131plar\u0131n\u0131 ta\u015f\u0131yan istekleri engelleyen bir g\u00fcvenlik katman\u0131d\u0131r. SQL enjeksiyonu (veritaban\u0131 sorgusuna zararl\u0131 kod s\u0131zd\u0131rma), XSS (siteye zararl\u0131 script enjekte etme) ve otomatik k\u00f6t\u00fc bot trafi\u011fi en s\u0131k s\u00fcz\u00fclen \u00fc\u00e7 sald\u0131r\u0131 t\u00fcr\u00fcd\u00fcr. WAF gerekir mi sorusunun teknik cevab\u0131 burada sakl\u0131d\u0131r: bu \u00fc\u00e7 sald\u0131r\u0131 t\u00fcr\u00fc, kullan\u0131c\u0131dan veri alan hemen her sitede d\u00fczenli olarak denenir.<\/p>\n<div class=\"highlight-box\">\n<p class=\"label\">Bilgi<\/p>\n<p>OWASP Top Ten listesi, enjeksiyon ve g\u00fcvenlik yanl\u0131\u015f yap\u0131land\u0131rmas\u0131 gibi kategorileri web uygulamalar\u0131nda en s\u0131k g\u00f6r\u00fclen a\u00e7\u0131klar aras\u0131nda sayar; WAF bu kategorilerin b\u00fcy\u00fck k\u0131sm\u0131n\u0131 istek daha uygulamaya ula\u015fmadan durdurur. Listenin tamam\u0131na <a href=\"https:\/\/owasp.org\/www-project-top-ten\/\" title=\"OWASP Top Ten \u2014 en s\u0131k g\u00f6r\u00fclen web uygulamas\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131\" target=\"_blank\" rel=\"noopener\">OWASP Top Ten sayfas\u0131ndan<\/a> ula\u015fabilirsiniz.<\/p>\n<\/div>\n<h2>A\u011f G\u00fcvenlik Duvar\u0131ndan Fark\u0131 Nedir<\/h2>\n<p>A\u011f g\u00fcvenlik duvar\u0131 (network firewall), IP adresi ve port seviyesinde \u00e7al\u0131\u015f\u0131r; hangi kaynaktan hangi porta ba\u011flant\u0131 kurulabilece\u011fini belirler, iste\u011fin i\u00e7eri\u011fine bakmaz. A\u015f\u0131r\u0131 ba\u011flant\u0131 hacmine dayanan sald\u0131r\u0131lara kar\u015f\u0131 kurulan koruma da genelde bu seviyede i\u015fler; bu konuyu <a href=\"https:\/\/narhost.com\/blog\/ddos-saldirisi-nedir-korunma\/\" title=\"DDoS sald\u0131r\u0131s\u0131 nedir, web sitesi nas\u0131l korunur \u2014 Narhost Blog\">DDoS sald\u0131r\u0131s\u0131 nedir yaz\u0131m\u0131zda<\/a> ayr\u0131nt\u0131l\u0131 anlatt\u0131k. WAF ise bir katman yukar\u0131dad\u0131r: ba\u011flant\u0131 zaten kurulmu\u015f ve istek sunucuya HTTP olarak ula\u015fm\u0131\u015ft\u0131r; WAF bu iste\u011fin parametrelerini, g\u00f6vdesini ve ba\u015fl\u0131klar\u0131n\u0131 inceler. Bir site ayn\u0131 anda hem a\u011f g\u00fcvenlik duvar\u0131na hem WAF&#8217;a ihtiya\u00e7 duyabilir, \u00e7\u00fcnk\u00fc ikisi farkl\u0131 sald\u0131r\u0131 y\u00fczeyini kapat\u0131r.<\/p>\n<h2>Sunucu Taraf\u0131 WAF ile Bulut\/CDN WAF Aras\u0131ndaki Fark<\/h2>\n<p>Sunucu taraf\u0131 WAF, ModSecurity gibi bir mod\u00fcl olarak sunucunun kendi \u00fczerinde \u00e7al\u0131\u015f\u0131r; kural seti (\u00f6rne\u011fin OWASP Core Rule Set) sunucuya y\u00fcklenir ve her istek bu mod\u00fclden ge\u00e7er. Kurulumu ve kural g\u00fcncellemesi teknik bilgi ister, sunucu kayna\u011f\u0131n\u0131n bir k\u0131sm\u0131n\u0131 da kullan\u0131r. Bulut\/CDN WAF ise trafi\u011fi siteye ula\u015fmadan \u00f6nce ayr\u0131 bir a\u011fda s\u00fczer; kurulumu genelde DNS y\u00f6nlendirmesiyle yap\u0131l\u0131r, kural g\u00fcncellemesini sa\u011flay\u0131c\u0131 y\u00fcr\u00fct\u00fcr ve sunucu kayna\u011f\u0131n\u0131 t\u00fcketmez.<\/p>\n<table>\n<thead>\n<tr>\n<th>\u00d6zellik<\/th>\n<th>A\u011f g\u00fcvenlik duvar\u0131<\/th>\n<th>Sunucu taraf\u0131 WAF<\/th>\n<th>Bulut\/CDN WAF<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u00c7al\u0131\u015ft\u0131\u011f\u0131 katman<\/td>\n<td>IP \/ port<\/td>\n<td>HTTP istek i\u00e7eri\u011fi<\/td>\n<td>HTTP istek i\u00e7eri\u011fi<\/td>\n<\/tr>\n<tr>\n<td>\u00d6rnek<\/td>\n<td>Sunucu g\u00fcvenlik duvar\u0131 kurallar\u0131<\/td>\n<td>ModSecurity + kural seti<\/td>\n<td>CDN sa\u011flay\u0131c\u0131s\u0131n\u0131n WAF katman\u0131<\/td>\n<\/tr>\n<tr>\n<td>Kurulum<\/td>\n<td>Sunucu\/a\u011f seviyesinde<\/td>\n<td>Sunucuya mod\u00fcl kurulumu<\/td>\n<td>DNS y\u00f6nlendirmesi<\/td>\n<\/tr>\n<tr>\n<td>Sunucu kayna\u011f\u0131<\/td>\n<td>Kullan\u0131r<\/td>\n<td>Kullan\u0131r<\/td>\n<td>Kullanmaz<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Yanl\u0131\u015f Pozitif Riski Nedir<\/h2>\n<p>WAF kurallar\u0131 imza ve kal\u0131p tabanl\u0131 \u00e7al\u0131\u015f\u0131r; bu y\u00fczden me\u015fru bir iste\u011fi zararl\u0131 bir istekle kar\u0131\u015ft\u0131rabilir. Bir form alan\u0131na yap\u0131\u015ft\u0131r\u0131lan uzun bir metin ya da belirli karakter dizileri, ger\u00e7ekte zarars\u0131z olsa bile SQL enjeksiyonu kal\u0131b\u0131na benzeyip reddedilebilir. Bu duruma yanl\u0131\u015f pozitif denir ve WAF gerekir mi sorusunun cevab\u0131n\u0131 &#8220;evet ama dikkatli kurarak&#8221; h\u00e2line getiren as\u0131l neden budur.<\/p>\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p>Yeni bir kural seti do\u011frudan engelleme modunda devreye al\u0131nmamal\u0131d\u0131r. \u00d6nce izleme (log-only) modunda birka\u00e7 g\u00fcn \u00e7al\u0131\u015ft\u0131r\u0131l\u0131p ger\u00e7ek trafikte ka\u00e7 iste\u011fi yanl\u0131\u015fl\u0131kla i\u015faretledi\u011fi g\u00f6r\u00fclmeli, ard\u0131ndan engelleme moduna ge\u00e7ilmelidir. Aksi h\u00e2lde sipari\u015f formunu dolduran ger\u00e7ek bir m\u00fc\u015fteri &#8220;istek reddedildi&#8221; hatas\u0131yla kar\u015f\u0131la\u015fabilir.<\/p>\n<\/div>\n<figure class=\"nh-sema\"><img loading=\"lazy\" src=\"https:\/\/narhost.com\/blog\/wp-content\/uploads\/2026\/09\/waf-gerekir-mi-sema-narhost.webp\" alt=\"WAF gerekir mi sorusuna trafik t\u00fcr\u00fc, katman ve kurulum tercihine g\u00f6re verilen karar \u015femas\u0131\" width=\"1200\" height=\"500\" loading=\"lazy\" decoding=\"async\"><figcaption>Formdan veri alan ya da \u00f6deme i\u015fleyen bir site i\u00e7in WAF katman\u0131 \u00f6ncelikli h\u00e2le gelir.<\/figcaption><\/figure>\n<h2>WAF Gerekir mi, Kimler \u0130\u00e7in \u015eart<\/h2>\n<p>WAF gerekir mi sorusunun pratik cevab\u0131 sitenin i\u015flevine ba\u011fl\u0131d\u0131r. Kullan\u0131c\u0131dan veri toplayan her form, bir sald\u0131r\u0131 y\u00fczeyi say\u0131l\u0131r; e-ticaret sitesi, \u00fcyelik sistemi olan bir platform ya da \u00f6deme formu bar\u0131nd\u0131ran bir sayfa i\u00e7in WAF \u00f6nceliklidir. Yaln\u0131zca kurumsal tan\u0131t\u0131m bilgisi sunan, form bar\u0131nd\u0131rmayan sabit bir site i\u00e7in \u00f6ncelik s\u0131ras\u0131 farkl\u0131d\u0131r: \u00f6nce yaz\u0131l\u0131m g\u00fcncellemesi ve hesap g\u00fcvenli\u011fi gelir; bu iki \u00f6nlemi <a href=\"https:\/\/narhost.com\/blog\/guclu-sifre-neden-onemli\/\" title=\"G\u00fc\u00e7l\u00fc \u015fifre neden \u00f6nemli, hangi risklere kar\u015f\u0131 korur \u2014 Narhost Blog\">g\u00fc\u00e7l\u00fc \u015fifre neden \u00f6nemli yaz\u0131m\u0131zda<\/a> ele ald\u0131k.<\/p>\n<div class=\"senaryo-block\">\n<p class=\"label\">\u00d6rnek senaryo<\/p>\n<p>Bir e-ticaret sitesinin \u00f6deme formuna otomatik SQL enjeksiyon denemeleri gelmeye ba\u015flad\u0131; hi\u00e7biri veritaban\u0131na ula\u015famad\u0131 ama sunucu g\u00fcnl\u00fcklerinde saatte y\u00fczlerce deneme birikti. Site sahibi bulut WAF katman\u0131n\u0131 devreye ald\u0131ktan sonra bu istekler siteye hi\u00e7 ula\u015fmadan s\u00fcz\u00fcld\u00fc ve sunucu kaynak kullan\u0131m\u0131ndaki gereksiz art\u0131\u015f da ortadan kalkt\u0131.<\/p>\n<\/div>\n<h2>Narhost Altyap\u0131s\u0131nda WAF Durumu<\/h2>\n<p>Narhost web hosting sunucular\u0131nda Imunify360 kullan\u0131l\u0131r; bu ara\u00e7 k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taramas\u0131 ve kaba kuvvet (brute force) korumas\u0131 sa\u011flar. Kurulumunu <a href=\"https:\/\/narhost.com\/destek\/imunify360-brute-force-koruma\/\" title=\"Brute force sald\u0131r\u0131lar\u0131n\u0131 Imunify360 ile nas\u0131l engellersiniz \u2014 Narhost Destek\">Imunify360 ile brute force koruma<\/a> destek makalemizde anlatt\u0131k. Bununla birlikte m\u00fc\u015fteriye a\u00e7\u0131k, kural baz\u0131nda \u00f6zelle\u015ftirilebilir bir WAF paneli \u00fcr\u00fcn sayfas\u0131nda yer almaz. Formdan veri toplayan ya da \u00f6deme alan bir site i\u00e7in bulut\/CDN WAF katman\u0131 eklemek, bu bo\u015flu\u011fu tamamlayan ba\u011f\u0131ms\u0131z bir ad\u0131md\u0131r.<\/p>\n<div class=\"success-box\">\n<p class=\"label\">Sonu\u00e7<\/p>\n<p>WAF gerekir mi sorusunun cevab\u0131 tek bir &#8220;evet&#8221; ya da &#8220;hay\u0131r&#8221; de\u011fil, sitenin form ve \u00f6deme y\u00fczeyine ba\u011fl\u0131 bir karard\u0131r. Form bar\u0131nd\u0131ran her site i\u00e7in WAF \u00f6nceliklidir; statik bir tan\u0131t\u0131m sitesi i\u00e7inse \u00f6ncelik \u00f6nce g\u00fcncelleme ve hesap g\u00fcvenli\u011fine gider.<\/p>\n<\/div>\n<h2>WAF Se\u00e7erken Kontrol Listesi<\/h2>\n<ul class=\"kontrol-listesi\">\n<li>Sitenizde form, giri\u015f ekran\u0131 ya da \u00f6deme ad\u0131m\u0131 olup olmad\u0131\u011f\u0131n\u0131 belirleyin.<\/li>\n<li>A\u011f g\u00fcvenlik duvar\u0131 ile WAF&#8217;\u0131n farkl\u0131 katmanlar\u0131 kapsad\u0131\u011f\u0131n\u0131 unutmay\u0131n, biri di\u011ferinin yerine ge\u00e7mez.<\/li>\n<li>Sunucu kayna\u011f\u0131n\u0131 korumak istiyorsan\u0131z bulut\/CDN WAF&#8217;\u0131, tam kontrol istiyorsan\u0131z sunucu taraf\u0131 WAF&#8217;\u0131 de\u011ferlendirin.<\/li>\n<li>Yeni kural setini \u00f6nce izleme modunda test edin, yanl\u0131\u015f pozitif oran\u0131n\u0131 \u00f6l\u00e7\u00fcn.<\/li>\n<li>WAF kurulsa bile yaz\u0131l\u0131m g\u00fcncellemesini ve g\u00fc\u00e7l\u00fc \u015fifreyi ihmal etmeyin; WAF bunlar\u0131n yerini tutmaz.<\/li>\n<li>Sunucunuzda haz\u0131r bir k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taramas\u0131 olup olmad\u0131\u011f\u0131n\u0131 \u00fcr\u00fcn sayfas\u0131ndan do\u011frulay\u0131n.<\/li>\n<li>Kural setini d\u00fczenli g\u00fcncelleyin; eski bir kural seti yeni sald\u0131r\u0131 kal\u0131plar\u0131n\u0131 tan\u0131maz.<\/li>\n<\/ul>\n<div class=\"kb-faq\">\n<h2>S\u0131k\u00e7a sorulan sorular<\/h2>\n<h3>WAF gerekir mi, k\u00fc\u00e7\u00fck bir tan\u0131t\u0131m sitesi i\u00e7in de \u015fart m\u0131?<\/h3>\n<p>Form bar\u0131nd\u0131rmayan, yaln\u0131zca bilgi sunan sabit bir sitede WAF \u00f6ncelikli de\u011fildir. Kullan\u0131c\u0131dan veri toplayan, giri\u015f ekran\u0131 ya da \u00f6deme ad\u0131m\u0131 olan her sitede ise \u00f6nceliklidir.<\/p>\n<h3>WAF kurarsam a\u011f g\u00fcvenlik duvar\u0131na h\u00e2l\u00e2 ihtiyac\u0131m olur mu?<\/h3>\n<p>Evet. A\u011f g\u00fcvenlik duvar\u0131 ba\u011flant\u0131 seviyesinde \u00e7al\u0131\u015f\u0131r, WAF ise iste\u011fin i\u00e7eri\u011fine bakar. \u0130kisi farkl\u0131 sald\u0131r\u0131 y\u00fczeyini kapatt\u0131\u011f\u0131 i\u00e7in biri di\u011ferinin yerini tutmaz.<\/p>\n<h3>Sunucu taraf\u0131 WAF m\u0131 bulut WAF m\u0131 daha g\u00fcvenli?<\/h3>\n<p>G\u00fcvenlik seviyesi kural setinin kalitesine ba\u011fl\u0131d\u0131r, konuma de\u011fil. Sunucu taraf\u0131 WAF sunucu kayna\u011f\u0131n\u0131 kullan\u0131rken bulut\/CDN WAF trafi\u011fi siteye ula\u015fmadan s\u00fczer ve sunucuyu yormaz.<\/p>\n<h3>WAF yanl\u0131\u015f pozitif \u00fcretirse ne olur?<\/h3>\n<p>Me\u015fru bir istek zararl\u0131 san\u0131l\u0131p reddedilebilir; \u00f6rne\u011fin bir m\u00fc\u015fteri sipari\u015f formunu g\u00f6nderemez. Bu riski azaltmak i\u00e7in yeni kurallar \u00f6nce izleme modunda test edilmeli, sonra engelleme moduna al\u0131nmal\u0131d\u0131r.<\/p>\n<h3>Narhost hosting paketlerinde WAF var m\u0131?<\/h3>\n<p>Narhost web hosting sunucular\u0131nda Imunify360 kullan\u0131l\u0131r ve bu ara\u00e7 k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taramas\u0131 ile kaba kuvvet korumas\u0131 sa\u011flar; m\u00fc\u015fteriye a\u00e7\u0131k, ayarlanabilir bir WAF paneli \u00fcr\u00fcn sayfas\u0131nda yer almaz. Form ya da \u00f6deme ad\u0131m\u0131 olan siteler i\u00e7in ek bir bulut\/CDN WAF katman\u0131 d\u00fc\u015f\u00fcn\u00fclebilir.<\/p>\n<\/div>\n<div class=\"cta-box\">\n<p class=\"label\">Narhost&#8217;ta<\/p>\n<p>Web hosting paketlerinde sunucu d\u00fczeyinde Imunify360 ile otomatik k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taramas\u0131 ve kaba kuvvet korumas\u0131 bulunur.<\/p>\n<p><a class=\"cta-btn\" href=\"https:\/\/narhost.com\/web-hosting\" title=\"Narhost web hosting paketleri\">Web hosting paketlerini incele<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>WAF gerekir mi sorusunun k\u0131sa cevab\u0131: SQL enjeksiyonu, XSS ve k\u00f6t\u00fc bot trafi\u011fi gibi uygulama katman\u0131 sald\u0131r\u0131lar\u0131n\u0131 s\u00fczen bu g\u00fcvenlik katman\u0131, \u00f6zellikle giri\u015f formu ve \u00f6deme sayfas\u0131 olan sitelerde \u015fartt\u0131r.<\/p>\n","protected":false},"author":1,"featured_media":2508,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[],"class_list":["post-2507","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik"],"_links":{"self":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/2507","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/comments?post=2507"}],"version-history":[{"count":1,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/2507\/revisions"}],"predecessor-version":[{"id":2509,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/2507\/revisions\/2509"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/media\/2508"}],"wp:attachment":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/media?parent=2507"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/categories?post=2507"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/tags?post=2507"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}