Forum Discussion
hoangnv
Nov 14, 2024Nimbostratus
ASM don't block attack XSS
hi all, I enabled all the XSS signatures and all signatures are state no staging. why the asm don't block this : <script>alert("attack")</script> It match to some Attack Signature ID : 200101609 ,...
zamroni777
Nacreous
did that <script>..... come in server response or client request?
asm wont block it if it comes from server response.
hoangnv
Nov 14, 2024Nimbostratus
It's client request, and asm has score 4 for event log this.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects