search cancel

The assertion Protect Against JSON Document Structure Threats stop policy with error

book

Article ID: 198736

calendar_today

Updated On:

Products

CA API Gateway API SECURITY CA API Gateway Precision API Monitoring Module for API Gateway (Layer 7) CA API Gateway Enterprise Service Manager (Layer 7) STARTER PACK-7 CA Microgateway

Issue/Introduction

The assertion Protect Against JSON Document Structure Threats  stop policy with error, and do not have a treatment. 

Environment

Release : 9.4

Component : API GATEWAY

Resolution

If the request body contains a string value longer than 200 characters, the index out of bounds errors appears. It doesn't matter what properties were selected for the JSON Document Structure Threat Protection assertion. If it is in the policy and no structure limits are selected, the error still occurs.

This issue does not happen in GW 10.0.00 CR1 because the jackson-core-asl-1.9.7.jar which causes the index out of bounds exception has been replaced with: US629868: Replacing Jackson ASL library with FasterXML Jackson (#1776)

Support have also tested that on lab, worked fine with Gw10 Cr01(success with more than 201 characters on payload)

Suggestion on this case to resolve if upgrade to GW 10 CR01, the fix doesn't exist in 9.4 version.