Forum Discussion
Blue_whale
Cirrocumulus
Aug 04, 2025[ASM] : SQL-INJ "end-quote UNION" - How to allow this signature to specific url/uri/parameter only
Hi Team , can someone explain me the attack type - end-quote UNION and the solution to allow this signature to specific url/uri/parameter only. Attack Type : SQL-Injection Detect...
Injeyan_Kostas
Nacreous
Aug 04, 2025You got this because the world UNION detected between quotes
Union is an SQL command so it match the signature
If you click the Accept button an exception will be automatically be created for the specific parameter.
Else you can manually create one under Security → Application Security → Parameters select you policy and create a parameter
Therre you can define the parameter name, the url and the attack signature you want to exclude.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects