For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

zafer's avatar
zafer
Icon for Nimbostratus rankNimbostratus
Nov 08, 2018

Comment Protection

Hi developers keep their comments into the codes, how can i protect/remove this comments with ASM   regards zafer  
ASM Advanced WAF
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Nov 09, 2018

You can use DataGuard feature in ASM . Even though HTML comments are not credit card / Social Security numbers they can still be sensitive data which should not leak to attackers.

 

Dataguard can mask the sensitive data with asterisks and raise a violation when comment is found.

 

You will need a Regular Expression for HTML comments, here is an example:

 

https://blog.ostermiller.org/find-comments-html