ryan_hamdi
Sep 06, 2024Nimbostratus
False Positive Bad Unescape BIG-IP ASM
I am encountering an issue where user input containing a percentage sign (%) causes the WAF to block the request with the error message "Bad Unescape".
How can I resolve this issue while ignoring the mismatch between the Content-Type header and the body payload?
Here is an example of the HTTP request:
POST /register HTTP/1.1
Host: test.com
Content-Type: application/x-www-form-urlencoded
Cookie: TS01xx
User-Agent: xx
Connection: keep-alive
Accept: application/json
Accept-Language: id-ID,id;q
Content-Length: x
Accept-Encoding: gzip, deflate, br
{"name":"NameMe","email":"test@gmail.com","username":"test","password":"Password1%"}