Forum Discussion

PowerShellDon_1's avatar
PowerShellDon_1
Icon for Nimbostratus rankNimbostratus
Nov 22, 2016

ASM | Too many cookies in the request

Hi I am getting some (what i believe to be) legit requests blocked by ASM. The violation is 'Modified domain cookie(s) , but when i click it to get more info on the violation i get; Too many...
application delivery
ASM Advanced WAF
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Nov 23, 2016

I believe that ASM will detect this as a violation because this condition (55 cookies with the same name/different values) actually breaks the RFC standard for cookies.

 

RFC6265 states:

 

"Servers SHOULD NOT include more than one Set-Cookie header field in the same response with the same cookie-name"