For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Thierry's avatar
Thierry
Icon for Nimbostratus rankNimbostratus
Aug 03, 2020

ASM best practice to allow \\ in new sec-ch-ua header

Hello,   Recently some of our developers have upgraded to msedge dev then beta, and these browsers (and maybe more chromium based browsers in dev/beta mode) are adding a specific Brand in the sec...
ASM Advanced WAF
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Aug 06, 2020

Hello,

 

As I see, current workaround is pretty good. Also, you can disable only "Url Normalization" for "sec-ch-ua" header - it should be enough.

 

Thanks, Ivan