f5devcentral / f5-waf-elk-dashboards

Apache License 2.0
51 stars 47 forks source link

Commas in sig_names field are not being parsed properly #12

Open aknot242 opened 4 years ago

aknot242 commented 4 years ago

Certain requests produce signature names that have commas in them. For instance, a request of http://hostname/?category=Gifts%27+SELECT+IF(500<1000, YES","NO") shows a value of:

sig_ids: 200002437, 200002228, 200000075

However, only shows a single signature name:

sig_names: SQL-INJ

image