For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

fpieressa's avatar
fpieressa
Icon for Altostratus rankAltostratus
Jun 14, 2017

JSON and ASM

Hi! We have the following HTTP Request:

POST /json.php HTTP/1.1
Host: test
Content-Length: 174
User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; SM-J510MN Build/MMB29M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36
Content-Type: application/json
Accept-Encoding: gzip, deflate
Accept-Language: es-ES,en-US;q=0.8

{"nuInspeccion":1234,"photo":[{"description":"IMG_20170609_092553.jpg","date":1497011153000,"mime":"image/jpeg","latitud":null,"longitud":null,"image":"/9j/4XjNRXhpZgAAS"}]}

Is there any way to configure in ASM to don't inspect the "image" JSON attribute?

We have configure a custom JSON Profile applied to the /json.php URL, but as I understand the JSON Profile applies to all the JSON POST request... is there any way to configure an exception for a specific JSON attribute?

Thanks!

1 Reply

  • you may need to move to V13.0 where we updated the JSON parser to allow element parsing and not bulk payload.