For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

libri_elio_1583's avatar
libri_elio_1583
Icon for Nimbostratus rankNimbostratus
Jun 10, 2014

XML Marformed error on ASM - handle GET/POST calls in two different way

Hello,   I have a problem to properly handle calls to an application that uses the same URL for the XML body and GET calls with parameter=value.   To avoid a WAF block (about a XSS xml signatur...
ASM Advanced WAF
management
security
falweiss_116591's avatar
falweiss_116591
Icon for Nimbostratus rankNimbostratus
Jun 02, 2016

Hi, old question, but here: You can set the profile on the URL-body itself

 

Security ›› Application Security : URLs : Allowed URLs ›› Allowed URL Properties Works with wildcardurls if needed. /yourxml/specificxml/notify/*

 

At the bottom (advanced) is the point you can attach it. Example: Order - default , Request Header Name Any, Request header value any, Request Body Handling: XML , Profile Name: Yourxmlprofile or [Create]