Forum Discussion

ryan_hamdi's avatar
ryan_hamdi
Icon for Nimbostratus rankNimbostratus
Sep 06, 2024

False Positive Bad Unescape BIG-IP ASM

I am encountering an issue where user input containing a percentage sign (%) causes the WAF to block the request with the error message "Bad Unescape".   How can I resolve this issue while ignoring...
security
amine-elhijazi's avatar
amine-elhijazi
Icon for Altocumulus rankAltocumulus

As I recall, there is a way to configure F5 to interpret a request as JSON, allowing the password to be passed as a parameter. Of course, you can permit any characters you want in the parameter.
To achieve this, I believe you can create a URL like /register, then specify the content type for that URL (e.g., XML, JSON, etc.).
Hope that helps! :)