The assertion Protect Against JSON Document Structure Threats stop policy with error
Article ID: 198736
Updated On:
Products
CA API Gateway
API SECURITY
CA API Gateway Precision API Monitoring Module for API Gateway (Layer 7)
CA API Gateway Enterprise Service Manager (Layer 7)
STARTER PACK-7
CA Microgateway
Issue/Introduction
The assertion Protect Against JSON Document Structure Threats stop policy with error, and do not have a treatment.
Environment
Release : 9.4
Component : API GATEWAY
Resolution
If the request body contains a string value longer than 200 characters, the index out of bounds errors appears. It doesn't matter what properties were selected for the JSON Document Structure Threat Protection assertion. If it is in the policy and no structure limits are selected, the error still occurs.
This issue does not happen in GW 10.0.00 CR1 because the jackson-core-asl-1.9.7.jar which causes the index out of bounds exception has been replaced with: US629868: Replacing Jackson ASL library with FasterXML Jackson (#1776)
Support have also tested that on lab, worked fine with Gw10 Cr01(success with more than 201 characters on payload)
Suggestion on this case to resolve if upgrade to GW 10 CR01, the fix doesn't exist in 9.4 version.
This issue does not happen in GW 10.0.00 CR1 because the jackson-core-asl-1.9.7.jar which causes the index out of bounds exception has been replaced with: US629868: Replacing Jackson ASL library with FasterXML Jackson (#1776)
Support have also tested that on lab, worked fine with Gw10 Cr01(success with more than 201 characters on payload)
Suggestion on this case to resolve if upgrade to GW 10 CR01, the fix doesn't exist in 9.4 version.
Feedback
Yes
No
Powered by
