For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jobec_45051's avatar
Jobec_45051
Icon for Nimbostratus rankNimbostratus
Nov 01, 2011

Cookie bug in ProxyPass V10 iRule ?

Hi All,     I think I've found a bug concerning cookies in the ProxyPass v10 iRule (http://devcentral.f5.com/wiki/iRules.ProxyPassv10.ashx).     We had a Safari browser not honoring the do...
application delivery
dev
devops
iRules
wendelyes's avatar
wendelyes
Icon for Altostratus rankAltostratus
Sep 13, 2022

Hello,

I am affected by this bug but I have a little different behavior. The browser (chrome) instead of not honoring the domain attribute, is discarding the cookie because the domain does not match. The browser is showing: "This attempt to set a cookie via a Set-Cookie header was blocked because its Domain attribute was inbalid with regards to the current host url"

 

Regarding the code, line 413 is removing the trailing "." and line 420 is adding it again so I am not sure if this is intended or a mistake. Why line 420 should add a leading "." if line line 413 removed a trailing "."?

In my opinion, I think that line 413 and 420 should be removed. And probaly add new code to add leading or trailing "." if the original domain contains it.

 

Regards