For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

stephen4f5's avatar
stephen4f5
Icon for Nimbostratus rankNimbostratus
Apr 17, 2024

Content type hearder charset=UTF-8

Hello friends,   We have a requirement to have WAF should only allow charset=UTF-8 in the Content-Type header.  So curios does this cover by any rule in ASM policy or do we have to create a custom r...
event
security
Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP
Apr 28, 2024

Hi stephen4f5,

Requests that do not contain charset=UTF-8 in the Content-Type header can be blocked with a custom attack signature.