For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

zafer's avatar
zafer
Icon for Nimbostratus rankNimbostratus
Nov 08, 2018

Comment Protection

Hi developers keep their comments into the codes, how can i protect/remove this comments with ASM

 

regards zafer

 

ASM Advanced WAF
security

2 Replies

  • samstep's avatar
    samstep
    Icon for Cirrocumulus rankCirrocumulus
    Nov 09, 2018

    You can use DataGuard feature in ASM . Even though HTML comments are not credit card / Social Security numbers they can still be sensitive data which should not leak to attackers.

     

    Dataguard can mask the sensitive data with asterisks and raise a violation when comment is found.

     

    You will need a Regular Expression for HTML comments, here is an example:

     

    https://blog.ostermiller.org/find-comments-html