Forum Discussion
h00ver_290951
Sep 19, 2016Nimbostratus
HTTP header insert rewrites header variable.
I am trying to insert an HTTP header variable with the following iRule:
when ACCESS_ACL_ALLOWED {
HTTP::header insert WL-Proxy-Client-Cert {Access::session data get "session.ssl.cert.whole"]
...
Lucas_Thompson_
Historic F5 Account
Always use HTTP::header replace instead of HTTP::header insert because it prevents the client pc from putting a malicious value in the original request.
Try putting quotes around the header name. TCL usually is good about guessing that stuff but maybe it's not guessing in the desired way here.
h00ver_290951
Sep 20, 2016Nimbostratus
I changed it to replace and tried with both quotes and no quotes. I still get the same result. Could the receiving server be manipulating the header as well?
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects