Forum Discussion

Ahmed_Eissa_206's avatar
Ahmed_Eissa_206
Icon for Nimbostratus rankNimbostratus
Sep 09, 2015

CSRF Protection not Working

implmentation of CSRF protection is very simple on f5 device , unfortunately it didn`t work with me and every attempt from my browser " firefox " to access the authenticated URL as "/authenticated/* ...
application delivery
ASM Advanced WAF
csrf
LTM
security
Ahmed_Eissa_206's avatar
Ahmed_Eissa_206
Icon for Nimbostratus rankNimbostratus
Sep 09, 2015

the attack signature is CSRF Attack ... i understood there is an issue with csrf regarding javascript , so could we fix this issue from the application side as changing some of javascript programming !!! ...

 

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Sep 14, 2015
    not really understanding the question here. CSRF protection from ASM wont work in javascript, you can't solve that with more javascript unfortunately.