For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JSC's avatar
JSC
Icon for Nimbostratus rankNimbostratus
Jul 04, 2017

ASM XSD validation and `choice` element

Hi, we have an issue with XSD validation. choice element doesn't work like expected by the W3C specification (https://www.w3schools.com/xml/el_choice.asp😞 Ex: ...
ASM Advanced WAF
security
JSC's avatar
JSC
Icon for Nimbostratus rankNimbostratus
Jul 04, 2017

Hi Daniel,

ASM is successfully blocking requests regarding the XSD except for the above 

choice
element.

Alarms are available under "Event logs" however for the choice condition, status is always "Legal Request" while we would expect "XML data does not comply with schema or WSDL document"...

Note: I add few more samples above