Forum Discussion

ghost-rider_124's avatar
ghost-rider_124
Icon for Nimbostratus rankNimbostratus
Dec 29, 2015

ASM JSON parsing and parameters learning

Hello

If JSON is parsing correctly by ASM then it should give me the suggestion for parameters inside JSON payload? for below example of JSON payload, ASM saying whole string is a parameter. If its working fine then would it give me parameters inside the payload not whole below as one parameter?

{
    "run-stateless": "true",
    "data": {
        "variables": {
            "exclude_discipline": ""
        }
    }
}

Due to above issue, I am getting illegal parameters, meta character in parameter name violation.

ASM Advanced WAF
security

5 Replies

Sort By
  • BinaryCanary_19's avatar
    BinaryCanary_19
    Historic F5 Account
    Jan 06, 2016

    It would be parsing the JSOn, but you may still get metacharacter violations because by default it is very restrictive.

     

    I wouldn't expect that you get metacharacter violations for ":" , "}" or "{" or even '"' if you have configured the URL correctly and attached a JSON profile to it.

     

    Did you add the URL as allowed, and configure the system to treat the body as JSON?

     

  • hiperesfera_364's avatar
    hiperesfera_364
    Icon for Nimbostratus rankNimbostratus
    Oct 16, 2017

    Hi,

     

    I am having a similar issue. For any reason my ASM policy is not able to parse and learn the parameters within the POST request :

     

    { "id":"rodolfo", "foo":"bar" }

     

    Did you manage to get this working ?

     

  • IKS's avatar
    IKS
    Icon for Nimbostratus rankNimbostratus
    Feb 21, 2019

    Hi Everyone,

     

    I have also that problem. I defined JSON as Content-Type, but it didn't learn parameter in POST data.

     

  • SteveGold's avatar
    SteveGold
    Icon for Nimbostratus rankNimbostratus
    Mar 13, 2019

    Hi, What version of BIG-IP do you have? Because version 12 cannot parse JSON`s..