For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mikegray_198028's avatar
mikegray_198028
Icon for Cirrus rankCirrus
Dec 02, 2015

can we block Cross-site scripting (XSS) in LTM

Hello, is there any possibility to block Cross-site scripting (XSS) in LTM module using Irule?
iRules
LTM
security
R_Marc's avatar
R_Marc
Icon for Nimbostratus rankNimbostratus
Dec 02, 2015

One could probably hobble something together in an iRule (there might even be some iRules for that in the codeshare area). Here is an example someone suggested.

 

This is really what ASM is for, however. That is tested and maintained. Rolling your own might work in some or even a lot cases, but it'll sign you up for maintaining it, which I wouldn't suggest.