Layer7 API Management

  • Private Community
 View Only
Back to discussions
Expand all | Collapse all

Getting failure when using Protect against code injection or sql attacks assertions

  • 1.  Getting failure when using Protect against code injection or sql attacks assertions

    Posted Jul 23, 2020 03:21 AM

    I am using policy fragment where I am adding security assertions. This fragment policy is included in main API service policy. In this fragment, I am using "Request: Protect against code injection [URL query string]" assertion and  getting below error message.

     "Unable to protect against code injection attacks - the request has already been routed"

     Same kind of error I am getting for another assertion "Request: Protect against SQL attack [URL path]"

     "Unable to protect against SQL attacks - the request has already been routed".

    Regards,
    Sumeet



  • 2.  RE: Getting failure when using Protect against code injection or sql attacks assertions
    Best Answer

    Broadcom Employee
    Posted Jul 23, 2020 11:23 AM
    Hello,

    This will happen if you have a routing statement before threat protection assertion.

    Can you send a screen shot of your services or post an export of it? 

    Original Message