For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kjc's avatar
kjc
Icon for Nimbostratus rankNimbostratus
Nov 18, 2015

Fragment Identifiers that ARE sent by browsers

I argued long and hard that browsers should not be sending the Fragment-Identifiers in the HTTP request. But I then I looked at some traces and I see that they sure look like they are sent! I don't k...
application delivery
iRules
LTM
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Nov 18, 2015

Well, for what it's worth, SAML Tracer is a browser plugin, not a proxy. So if you actually did see FIs in SAML Tracer, it's likely only what the browser is seeing locally. If you do an actual packet capture you shouldn't see FIs on the wire, nor would any mainstream browser reliably send them if one was flukishly doing so. In other words, I wouldn't count on using FIs at the server level.