Forum Discussion

SerhiiR's avatar
SerhiiR
Icon for Nimbostratus rankNimbostratus
Mar 15, 2023

ASM Brute Force Protection feature inserts the script to response headers. How it may be removed?

Hello, We have faced with a problem, when Brure Force Protection feature inserts the script to response header. I have pasted the script below. The fact is that script is inserted for each applicati...
brute force
security
SerhiiR's avatar
SerhiiR
Icon for Nimbostratus rankNimbostratus

Hello Daniel,

Thank you for the recommendation. But we do not have the bot defense profile at all. From the Brute Force Protection configuration, the device ID is switched to Never Trigger.

Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Mar 20, 2023

Other features that might cause JavaScript injection.

  1. Analytics profiles
  2. CSRF protection
  3. DoS protection profile using Client Side Integrity Defense.