Forum Discussion

Ulf_Zimmermann_'s avatar
Ulf_Zimmermann_
Icon for Nimbostratus rankNimbostratus
May 14, 2010

Filter certain parts out from HTTP::header or HTTP::uri?

Our developers unfortunately love to have long SAMLResponse as part of the URI, which could also show up via referrer. I currently got an iRule I use to send a NCSA combined weblog to a syslog server and these long SAMLResponse cause lines to be cut off.

 

 

Anyone got a tip how to remove anything "SAMLResponse=.*" from URI or Referrer, so it doesn't get logged?

 

 

 

application delivery
dev
devops
iRules
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    May 14, 2010
    Hi,

     

     

    You can use an iRule like the one in the post below to do this. The example was just removing the parameter from the URI, but you could use the same logic to sanitize the Referer header. Note that this wouldn't prevent the client from seeing the value--the app wouldn't see (or log) it.

     

     

    Removing a parameter from a query

     

    http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/afv/topic/aft/1172257/aff/5/showtab/groupforums/Default.aspx

     

     

    Aaron