For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

natethegreat_23's avatar
natethegreat_23
Icon for Nimbostratus rankNimbostratus
Apr 28, 2017

iRule for ignoring request if it includes a specific parameter value

We currently have an iRule that is examining cookies to block or allow the request. We would also like to add a section that looks for a parameter's value. The parameter needs to equal "true" for it ...
ASM Advanced WAF
iRules
parameter
security
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Apr 28, 2017

Use the URI::query instead of HTTP::query.

This page explains what is, and has examples in how to use:

https://devcentral.f5.com/wiki/iRules.URI__query.ashx

Should be something like this (not tested iRule):

when HTTP_REQUEST {
  if { [HTTP::path] starts_with "/path/" } 
  {
    if { [URI::query [HTTP::uri] "value"] ne "true" }
    {
      blocking action
    }
    else
    {   
      ignoring action
    }
  }
}