Technical Tip: How to protect against JSON attacks in the body (SQL injection)

The signature profile does not detect SQL injections in a JSON body. For FortiWeb to scan and block JSON requests, the JSON Protection policy needs to be added to the Web Protection Profile. Configure a JSON Protection Profile with the Signature Detection option enabled (see the screenshot below) and assign it to the Web Protection Profile. No JSON rule is needed unless further customization of API access is desired.

Attack logs:

Note: To detect XML injection in an XML body, enable Signature Detection under the XML Protection settings. This configuration is similar to the existing guidance for detecting SQL injection in a JSON body, which also requires enabling Signature Detection under the JSON Protection settings.