For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JDamianB's avatar
JDamianB
Icon for Altostratus rankAltostratus
Jun 01, 2023
Solved

Detecting /# in an URL

Hi I created an iRule to permit/deny the access to the URL /#/admin according to the client address. My problem is neither [HTTP::uri] nor [HTTP::path] contain  #/admin I observed navigators and c...
devops
JDamianB's avatar
JDamianB
Icon for Altostratus rankAltostratus
Jun 01, 2023

Hi Marycasey

But it seems the Referer is empty.

I added these two lines to my iRule

set referer [HTTP::header Referer]
log "REFERER: $referer"

and nothing appears after REFERER: in the /var/log/ltm

 

Thanks anyway

 

P.D: the response from the server contains  "Referrer-Policy: no-referrer"

 

JDamianB's avatar
JDamianB
Icon for Altostratus rankAltostratus
Jun 01, 2023

Hi

I have found  #/admin  in a JavaScript created by, I think, AngularJS

<a href="#/admin/contexts" data-ng-class="{\'active\': location.path() === \'/admin/contexts\'}" >

  • JDamianB's avatar
    JDamianB
    Icon for Altostratus rankAltostratus
    Jun 01, 2023

    As I suspected, the #/admin is processed in the client side and it is not sent to the server. The next wikipedia article explains the use of fragments:

    https://en.wikipedia.org/wiki/URI_fragment