Forum Discussion
SteveD1979
Cirrostratus
CirrostratusDisabling ASM attack signature for file upload
Hello, We have an application where customers may attach files when they submit an enrollment. Sometimes the upload of these files are being blocked by our ASM policy because they are similar to a ...
Hi SteveD1979,
The request body handling control can be disable by checking on the content-type or a different specific header value.
"Content-type: multipart/form-data" header is sent on file upload. It may has a different value based on the application.
SteveD1979Cirrostratus
CirrostratusThe filename can only be two different things. Is there a way to look at the payload and if it contains one of those file names allow the upload and keep the ASM policy in tact?
