evasion technique bad unescape false positive

Yes, of course it is possible to disable this violation in the policy. Do you have one ASM policy applied to several applications? in such case it is best to create a separate policy for your specific application (you can easily copy policies). However I suggest that you first understand the reason for false positive... usually it is either due to configured decoding rounds or the Referer header from a problematic webapp.

 

Some information is available in F5 Knowledge Base Article:

 

https://support.f5.com/csp/article/K7929

 

Hope this helps,

 

Sam