How to secure url on irule on F5?

Hi locki,

seems your app is vulnerable to open redirects. Take a look at the following links to learn more:

• OWASP Cheat Sheet Series - Unvalidated Redirects and Forwards 
• MITRE - CWE-601: URL Redirection to Untrusted Site
• PortSwigger - Open redirection 

Can be fixed with ASM (BIG-IP v16.1): MyF5 > BIG-IP Application Security Manager: Implementations > Mitigating Open Redirects  
IMHO it should be fixed in the app code by your developers.

KR
Daniel