For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Greg_Donohoe_25's avatar
Greg_Donohoe_25
Icon for Nimbostratus rankNimbostratus
Oct 16, 2015

HTTP header insert

I am trying to insert the HTTP header "X-Frame-Options: SAMEORIGIN" in order to mitigate a security vunerability. Can anyone share the correct syntax for this please?  
Andy_McGrath's avatar
Andy_McGrath
Icon for Cumulonimbus rankCumulonimbus
Oct 16, 2015

For all HTTP responses simple add to HTTP profile under 'Request Header Insert' value of 'X-Frame-Options: SAMEORIGIN'

 

If you need to add to select HTTP responses you will need an iRule to identify which responses you wish to add the HTTP header into.