For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ghost-rider_124's avatar
ghost-rider_124
Icon for Nimbostratus rankNimbostratus
Dec 29, 2015

ASM JSON parsing and parameters learning

Hello If JSON is parsing correctly by ASM then it should give me the suggestion for parameters inside JSON payload? for below example of JSON payload, ASM saying whole string is a parameter. If its...
ASM Advanced WAF
security
BinaryCanary_19's avatar
BinaryCanary_19
Historic F5 Account
Jan 06, 2016

It would be parsing the JSOn, but you may still get metacharacter violations because by default it is very restrictive.

 

I wouldn't expect that you get metacharacter violations for ":" , "}" or "{" or even '"' if you have configured the URL correctly and attached a JSON profile to it.

 

Did you add the URL as allowed, and configure the system to treat the body as JSON?