For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ahmed_Eissa_206's avatar
Ahmed_Eissa_206
Icon for Nimbostratus rankNimbostratus
Sep 09, 2015

CSRF Protection not Working

implmentation of CSRF protection is very simple on f5 device , unfortunately it didn`t work with me and every attempt from my browser " firefox " to access the authenticated URL as "/authenticated/* ...
application delivery
ASM Advanced WAF
csrf
LTM
security
Ahmed_Eissa_206's avatar
Ahmed_Eissa_206
Icon for Nimbostratus rankNimbostratus
Sep 09, 2015

the attack signature is CSRF Attack ... i understood there is an issue with csrf regarding javascript , so could we fix this issue from the application side as changing some of javascript programming !!! ...

 

boneyard's avatar
boneyard
Icon for MVP rankMVP
Sep 14, 2015
not really understanding the question here. CSRF protection from ASM wont work in javascript, you can't solve that with more javascript unfortunately.