Custom IPS signature

[HristoGrigorov]

Is it possible to create custom IPS signature to block all JavaScripts (JS) files that are using WebSocket or more specifically:

self.SOCKET = "wss://127.0.0.1:";

[PhoneBoy]

We allow custom snort signatures to be imported with some limitations.
Not sure if this can be created with snort or not.