Forum Discussion

JoseP1's avatar
JoseP1
Icon for Nimbostratus rankNimbostratus
Nov 19, 2021

[HTTP::uri] contains "*"

 A vulnerability has been detected in the application, and if someone puts the character "*" in the url, it goes where it doesn't have to. we thought about doing a simple redirect, but it doesn't wo...
devops
iRules
security
xuwen's avatar
xuwen
Icon for Cumulonimbus rankCumulonimbus
Nov 19, 2021

use this code:

when HTTP_REQUEST {

switch -glob [HTTP::uri] {

{*[*]*} -

"/" -

"/example1" {

HTTP::redirect "https://[HTTP::host]/blabla"

}

}

}