Skip to main content
mohamed_Mahdi
New Member
February 8, 2018
Question

Scan JSON object inside http request body

  • February 8, 2018
  • 0 replies
  • 1980 views

Hi everyone,

 

We are currently testing the fortiguard antivirus to secure access to our REST API.

Our API uses JSON as content-type in http request and response.

In http requests, for some services we must send encoded file in base64 inside the JSON object, as shown below :

 

 

"plateforme": { 
     "typeIdPlateforme": "1", 
     "idPlateforme" : "12345678901234" 
   }, 
 "idDemandeur" : "aaa", \ 
 "rsDemandeur": "AAAA", \ 
 "dumeA": { 
     "xmlDume" : "UEsDBAoAAAAAAOCYuCg8z1FoRAAAAEQAAAAJAAAAZWljYXIuY29tWDVPIVAlQEFQWzRcUFpYNTQoUF4pN0NDKTd9JEVJQ0FSLVNUQU5EQVJELUFOVElWSVJVUy1URVNULUZJTEUhJEgrSCpQSwECFAAKAAAAAADgmLgoPM9RaEQAAABEAAAACQAAAAAAAAABACAA/4EAAAAAZWljYXIuY29tUEsFBgAAAAABAAEANwAAAGsAAAAAAA==" 
   } 
 }

  In this sample, the attribut "xmlDume" is an encoded file (base64). When i took an infected file, encoded it and sent it in the json,  the antivirus was unable to detect that the value of the "xmlDume" attribut is an infected encoded file.   Is the fortiguard antivirus is capable to scan the JSON object or some attributs like "xmlDume" ? Thanks in advance.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!