Forum Discussion

pedinopa_170325's avatar
pedinopa_170325
Icon for Nimbostratus rankNimbostratus
Aug 06, 2018

hide jsession ID

I need to remove the jsession ID from my client browser. The jsession id is not used but when a client makes the initial connection to my web site the browser inserts a jsession ID then the server switches to using cookies and puts the jsession ID in the cookie. So I need to prevent it from being generated and used in the URL for the initial connection.

Is this done through an irule when HTTP_RESPONSE {

Check if response is a redirect and the Location header has a jsessionid 
if { [HTTP::header Location] contains ";jsessionid="}{
     Remove ;jsessionid= up until a ? which starts the query string
    HTTP::header replace [string map [list [findstr [string tolower [HTTP::header Location]] ";jsessionid=" 12 "?"] ""] [HTTP::header Location]]
}

}

BIG-IP
iRules
security
  • pedinopa_170325's avatar
    pedinopa_170325
    Icon for Nimbostratus rankNimbostratus
    Aug 06, 2018

    this irule worked when HTTP_REQUEST {

     Check if the path contains a jsessionid
if {[HTTP::path] contains ";jsessionid="}{

     Split the path on the jsession ID and update it to the first field
    HTTP::path [getfield [HTTP::path] ";jsessionid=" 1]
}

    }