Bug ID 2297717: Base64 decoding is disabled for disabled on the url request body for "image/png" Header-Based Content profile

Last Modified: Jul 28, 2026

Affected Product(s):
BIG-IP ASM(all modules)

Fixed In:
21.1.0.1, 21.0.0.3, 17.5.1.8, 17.1.3.4

Opened: May 20, 2026

Severity: 3-Major

Symptoms

When creating an ASM policy from an OpenAPI file containing a requestBody with a schema defined as type: string and format: base64, a header-based content profile on the URL is configured with "base64 decoding" set to "disabled" while it must be "required"

Impact

Base64 Decoding disabled in GUI

Conditions

An OpenAPI file is imported to create a policy, and the file contains a URL with a request body content type image/png, and the schema is defined with type: string and format: base64.

Workaround

Base64 Decoding enabled in GUI

Fix Information

In handle_request_body, extract from the schema format or contentEncoding instead of just contentEncoding

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips