Bug ID 1038689: "Mandatory request body is missing" violation should trigger for "act as a POST" methods only

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP ASM(all modules)

Fixed In:
17.1.1

Opened: Aug 04, 2021

Severity: 3-Major

Symptoms

If a request is configured "Body is Mandatory", any request with "act as a GET" method with no body triggers a "Mandatory request body is missing" violation

Impact

The request is blocked with "Mandatory request body is missing" violation

Conditions

- Create default "/index.php" URL with "Any" method and enabled "Body is Mandatory" setting -Request with GET or 'act as GET' method with no body

Workaround

None

Fix Information

The request passes with no violations.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips