Forum Discussion
NimbostratusBypass security if url contains particular string
NimbostratusThanks for the responses.
Juraj your suggestion sounds like what I want.
Does that imply that the word "ticket" just needs to be included or that there must be some text after the word ticket?
having tested the site we found that If I were to enter the url up to the point of ticket with nothing after it would present a single FA logon page so any rule we put in to allow these links through would need to check for ticket =n with n being anytext.
Apologies if that's what your rule is saying already!
Cirrusne in the iRule stands for “not equal”, so the iRule above expect the parameter “ticket” in the URL to exists and not be empty, i.e. it must have some value. If you know the logic of that value, you could also validate it in your iRule to make sure someone is not bypassing your controls by simply adding a non-empty “ticket” parameter.
I have something similar on our F5, where the iRule lets all POST requests from Slack in to our internal JIRA system, as long as such POST requests contain a specific Slack token.
