KB: 00001061

How to prevent sites from JSON injection?

Problem Statement

Client wants to protect their sites from JSON injection attack which are protected by Haltdos solutions.

SOLUTION

The client can achieve the above requirement by configuring JSON policies.

1. First, log into the haltdos management console.

2. Go to Stacks > WAF > Listener > Profile > Profile default setting > Policy > JSON policy > Configure JSON policies > Save Changes

3. Now inject malicious JSON data to the respective listener.

4. Haltdos solutions take action on the malicious JSON data as per the configuration saved.