Forum Discussion
[HTTP::uri] contains "*"
A vulnerability has been detected in the application, and if someone puts the character "*" in the url, it goes where it doesn't have to.
we thought about doing a simple redirect, but it doesn't work.
when HTTP_REQUEST {
if { [HTTP::uri] equals "/" || [HTTP::uri] equals "/example1" || [HTTP::uri] contains "*" }
{
HTTP::redirect "https://[HTTP::host]/blabla/"
}
}
the original irule did not have [HTTP :: uri] contains "*". has been put it and failed.
any ideas please?
thanks in advance
2 Replies
- xuwen
Cumulonimbus
use this code:
when HTTP_REQUEST {
switch -glob [HTTP::uri] {
{*[*]*} -
"/" -
"/example1" {
HTTP::redirect "https://[HTTP::host]/blabla"
}
}
}
- JoseP1
Nimbostratus
great¡¡thank you very much¡¡
. I try it and tell you.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com