I have turned on ASM for one of our websites. It seems to be throwing illegal request for payloads that are
content-type - text/xml
content-encoding - gzip
which have null chars. The ASM say we are breaking XML.
But it looks to me like its not decompressing the data first before analysing as XML
Solved! Go to Solution.