Forum Discussion
Eric_Grepps_264
Nimbostratus
NimbostratusEncrypt URL's and querystrings
I know about the SSN and credit card scrubber, but is it possible to search the payload for http href's and replace them with an encrypted string them decrypt it on the way back in.
We have some info in our querystrings that we would like to hide using the loadbalancer until the development staff can make the appropriate change to the code.
Any help would be greatly appreciated.
Thanks,
Eric
hoolioCirrostratus
Hi,
You should be able to use the credit card scrubber rule (Click here) as an example for inspecting and replacing the HTTP response content. You could search for the URLs/URIs in the response content and use the AES functions (Click here) to encrypt the content. On subsequent responses, you could use HTTP::header or HTTP::uri to decrypt the strings.
If there is sensitive data in the HTTP response headers, you would need to en/decrypt that seperately using the HTTP::header functions (Click here).
Try starting with this and repost with any questions.
Aaron- Please note that this would work provided there is no client side logic that uses these links or information in these links.
