For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

willerman's avatar
willerman
Icon for Nimbostratus rankNimbostratus
Oct 09, 2013

Handling dynamic pseudoparameters in ASM policies

Hi folks, I have a challenging typo3 web application regarding ASM: I want to enforce parameters but unfortunately this application uses pseudo parameters for identifying (un)changed files.

 

A typical request looks like this: GET /typo3conf/ext/sitecore/Common/Public/JavaScript/foundation/foundation.forms.js?137162555

 

The pseudo parameter is a unix-timestamp.

 

Can anyone tell me how to configure the ASM to ignore this parameter? Adding a wildcard parameter () on URL level (/typo3conf/ext/sitecore/Common/Public/) doesnt help unfortunately...

 

Cheers

 

deployment
security

4 Replies

  • rob_carr's avatar
    rob_carr
    Icon for Cirrocumulus rankCirrocumulus
    Oct 10, 2013
    Have you tried setting up a no-name type parameter with a wildcard (or possibly a regex expression) on the URL?
  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Apr 13, 2015

    it looks like a path parameter you might be able to do something with that, look at the profile, advanced settings: Handle Path Parameters