Forum Discussion
locki
Nimbostratus
NimbostratusHow to secure url on irule on F5?
I need secure one think and i dont know how to do it correctly and properly. We have this link on website for aplication: https://www.somewebsite.com/test/UI/Login?realm=external&goto=https://www.so...
Daniel_Wolf
MVP
MVPHi locki,
seems your app is vulnerable to open redirects. Take a look at the following links to learn more:
- OWASP Cheat Sheet Series - Unvalidated Redirects and Forwards
- MITRE - CWE-601: URL Redirection to Untrusted Site
- PortSwigger - Open redirection
Can be fixed with ASM (BIG-IP v16.1): MyF5 > BIG-IP Application Security Manager: Implementations > Mitigating Open Redirects
IMHO it should be fixed in the app code by your developers.
KR
Daniel
