Forum Discussion
helenio
Nimbostratus
NimbostratusBypass "Bad unescape" in Body POST (ASM, POST, JSON)
Here the Block. As you can see is "%" is detected without encoding meaning. This is normal since the "%" is in the Body of the post as JSON data (see below) Of course if I disable the "Bad unesca...
Hi,
Have a look here, it's how to solve it using AWAF Microservices :
False Positive Bad Unescape BIG-IP ASM | DevCentral
Or
you can add a JSON content profile : https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-13-0-0/20.html
check the impacted URL >> create it explicitly >> enable meta characters.