For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

misch43's avatar
misch43
Icon for Nimbostratus rankNimbostratus
Jan 17, 2023

ASM: Apostroph (0x27) char in header value

Hi, we see HTTP requests comming in where the User-Agent header ist delimited by an apostroph (0x27 ASCII). The ASM flags this as a violation and suggests me to allow that char. As far as I unterst...
security
Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Jan 17, 2023

Hi misch43 , 
I recommend to ask server developer. 
Take some samples from F5 Violated requests " Contains Apostroph " to Backend server developer to review it with him to take the proper action against this violation , if you should allow or Block it.