Forum Discussion
Gumshoe
Altostratus
AltostratusF5 not Identifying Parameter in Text/Plain Upload
In a webkit:
content disposition header, name="file" ; filename="EXAMPLE DOCUMENT 2024.txt"
Content-type: text/plain
Document data example system (
The issue is that there is already a parameter built at the URI for file as an upload, set to block executables. Yet, it seems that the F5 continues to scan the document and it is not picking up the built parameter. Is it doing this by design? Since F5 is able to parse text? This seems to happen on uploads whose content types are text and xml.
- zamroni777
Nacreous
text format doesnt mean it's safe.
for example, sql injection attack, credit card data theft, etc. are also text.for your case, you can create local traffic policy to disable asm or set specific asm policy for the upload file traffic.
and btw, content disposition header is usually for http response, not request.
that might be the cause why asm block that http upload request
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Disposition
