For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JoseP1's avatar
JoseP1
Icon for Nimbostratus rankNimbostratus
Nov 19, 2021

[HTTP::uri] contains "*"

 A vulnerability has been detected in the application, and if someone puts the character "*" in the url, it goes where it doesn't have to. we thought about doing a simple redirect, but it doesn't wo...
devops
iRules
security
xuwen's avatar
xuwen
Icon for Cumulonimbus rankCumulonimbus
Nov 19, 2021

use this code:

when HTTP_REQUEST {

switch -glob [HTTP::uri] {

{*[*]*} -

"/" -

"/example1" {

HTTP::redirect "https://[HTTP::host]/blabla"

}

}

}