For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gustavo_Lazarte's avatar
Gustavo_Lazarte
Icon for Nimbostratus rankNimbostratus
Oct 09, 2009

Cross-Script Audit

Hello,     I have upgraded to version 10.0 and I got audited with this cross-script vulnerability. I thought I turned off on 9.01. Do you know if I can trun off Cross-Script attacks on the...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 14, 2009
You could try to handle this in an iRule, but there are simply too many ways that an attacker could send malicious requests to the application that it's not really feasible to try and handle them all in an iRule. I'd suggest you consider having the application fixed so that all user input is properly validated and sanitized, and implementing an application firewall.

 

 

Aaron