Forum Discussion

nikhil_raj_2965's avatar
nikhil_raj_2965
Icon for Nimbostratus rankNimbostratus
Dec 06, 2017

null in multi-part parameter value

Dear All, My customer wants a restriction on a parameter type in the url. The customer wants to allow only doc/docx/pdf files for the url. I did the below steps to create the parameter. ...
ASM Advanced WAF
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Dec 10, 2017

as nathan suggests in the other question: "Looks like the block is "Null in multi-part parameter value". If you check your policy settings the block column will be blocked. You could uncheck this?"

 

also be aware that what you do is just checking the extension, i could upload an .exe by naming it .docx.