Forum Discussion

Approxee's avatar
Approxee
Icon for Nimbostratus rankNimbostratus
Sep 15, 2017

ASM - Regex matching of URL with or without final / trailing slash

Hi Fourm,   I have a situation where sometimes the URL is requested with a final slash and sometimes it is not. Both URIs serve the content without a 301 redirect to the prefered URL - they both ...
ASM Advanced WAF
security
Torti's avatar
Torti
Icon for Cirrus rankCirrus
Sep 22, 2017

in my opinion, it is a missing feature. you allways have to add 2 URLs. So, if you have 10 Restful services in one policy, you need to add 20 URL. If you are using URL parameter....puh. An irule would be an option, like nathan allready says. But then, you manipulate the traffic and it can be complicated depending on the size of the application

 

Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Sep 22, 2017

Hi Torti,

 

I think it wouldn't be RFC compliant if F5 change this behavior. And it can introduce security issues. do you want request to /logon.php can allow /logon.php/? you will say No, it is a real page, there is a . between the name and the extension but some sub directories contains dot.

when you create a Restful service or when you code HTLM content, you have to write exact URL and not expect the web server to solve a configuration issue.

Yes, some web servers manage wrong URL. some redirect to right URL, some others accept the request!