Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Gustavo_Lazarte's avatar
Gustavo_Lazarte
Icon for Nimbostratus rankNimbostratus
Feb 16, 2009

infinite url request

In a security audit we have find out that our webservers are receiving infinite URL requests like HTTP://xx.xx.xx.xx/YYYYYYYYYYYY..YYY. Is there a way put a limit in the URL requests?

 

 

Thanks

1 Reply

  • hwidjaja_37598's avatar
    hwidjaja_37598
    Icon for Altostratus rankAltostratus
    Feb 16, 2009
    What if you reject it when the length of URI more than n chars, eg. 

     
 when HTTP_REQUEST { 
 if {[string length [HTTP::uri]] > 30} { 
 reject 
 }  
 }