Forum Discussion

George_33482's avatar
George_33482
Icon for Nimbostratus rankNimbostratus
Jul 17, 2018

decoding parameter name in ASM

Hello,

 

i have the violation of illegal parameter in the event viewer where part of the POST URL contains the parameter "ctrlvcol%3DcaptureAmount%3Bctrl%3Dconstraints%3Brow%3DTTT%3Btype%3Dtxt" while it should be ctrlvcol=captureAmount;ctrl=constraints;row=TTT;type=txt", how can I decode the parmeter name to match undecoded name before asm deems as illegal.

 

Regards, George

 

ASM Advanced WAF
security
  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    Jul 17, 2018

    Check the character sets > parameter name. Check if the % is allowed.

     

    I think ASM would then convert after %3 to = after.

     

    Also, make sure the application language of the policy matches the server.