Forum Discussion

sbobic_232506's avatar
sbobic_232506
Icon for Nimbostratus rankNimbostratus
Dec 15, 2015

Applying iRule to ASM policy - file upload form protection

So, I have found the following iRule which should block the upload of PHP files in file upload forms: when HTTP_REQUEST { if { [HTTP::header exists "Content-Disposition"] } { ...
ASM Advanced WAF
security
Stefan_Klotz's avatar
Stefan_Klotz
Icon for Cumulonimbus rankCumulonimbus
Dec 16, 2015

Maybe I'm totally wrong, but the initial iRule has nothing to do with ASM and is based on standard LTM functions. So nothing specific to configure on ASM-side.

Try to adjust your iRule like this:

when HTTP_REQUEST {
    if { [HTTP::header exists "Content-Disposition"] } {
        log local0. "Content-Disposition: [HTTP::header value "Content-Disposition"]"
        switch -glob [HTTP::header value "Content-Disposition"] {

And verify your logs afterwards. Either the header isn't available at all or it doesn't match your switch-statements.

Ciao Stefan šŸ™‚