For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
May 25, 2016

Enable AJAX blocking behavior (JavaScript injection)?

Hi,   Does someone know exactly what kind of javascript is injected by this ASM feature and how it works exactly ?   Best Regards   Yann  
ASM Advanced WAF
BIG-IP
security
Arnaud_Lemaire's avatar
Arnaud_Lemaire
Icon for Employee rankEmployee
May 26, 2016

Hello Yann, will have to dig into it. My guess so far is that ajax requests are not interactive with the end user most of the time, what i mean is you use it to retrieve content to be used by the pages locally. So an error page will not be displayed by the return of an ajax call. The feature seems to respond with a javascript which will be interpreted by the browser and lauching a popup with the error message.