smalex
Altostratus
AltostratusContent-length Detected as 0; False detection ASM
There are many blocks that I can see for reason 'post request with content-length 0' but those are genuine requests. What could cause this false detection? Please guide
Forum Discussion
5 Replies
DomaiYes so ASM treats this as a - HTTP Parser Attack, because the content length should be a positive number. If there are valid requests then disable - Content length should be a positive number under - HTTP protocol compliance.
smalexWe would not want to disable this check. I would like to know reason why it is detected as content 0 when it is actually not. It is a registration page and even when all fields are filled, page is detected as content 0.
- boneyard
MVP
it is detected as 0 because it is 0. look at your screenshot it quite literally says
Content-Length: 0- smalex
Dear Boneyard,
I did see that content-length as 0 but that is not the case. User is sending form data. My query is whether there can be anything in the app or something that can make ASM detect the content as 0...
- boneyard
the user might be sending data but that is not the case in this request.
it might have been another request.
i would focus on making sure you are looking at the right information instead of assuming the ASM does something wrong here.