Forum Discussion

dgytech's avatar
dgytech
Icon for Altostratus rankAltostratus
Mar 29, 2018

iRule response header based on specific URI

Hello- given that a HTTP_RESPONSE does not include host, is there a way to flag a HTTP_REQUEST and then apply a HTTP_RESPONSE header to that flagged traffic? The specific header is as follows:

 

when HTTP_RESPONSE {HTTP::header insert X-FRAME-OPTIONS "SAMEORIGIN"}

 

I basically only want to apply this HTTP_RESPONSE header when host=abc.com and uri=/test.

 

Thank you for any assistance here.

 

iRules
LTM
security

1 Reply

Sort By
  • crodriguez's avatar
    crodriguez
    Ret. Employee
    Mar 29, 2018

    Sure.... There are a couple of different ways to do this. One way would be to save the HTTP::host and HTTP::uri values to a variable on the HTTP_REQUEST event. For example:

    when HTTP_REQUEST {
    set host_uri [HTTP::host][HTTP::uri]
}

when HTTP_RESPONSE {
    if { $host_uri eq "abc.com/test" } {
        HTTP::header insert "X-Frame-Options" "SAMEORIGIN"
    }
}

    You can tweak the way you save the host and URI on the HTTP_REQUEST event if you are not looking for an exact match on "abc.com/test". You could also make your test of the host and URI on the HTTP_REQUEST event and set a flag that you then check on the HTTP_RESPONSE event to see if you have to insert the X-Frame-Options header. For example:

    when HTTP_REQUEST {
    if { [HTTP::host] eq "abc.com" && [HTTP::uri] eq "/test" } {
        set insertXFrame true
    }
}

when HTTP_RESPONSE {
    if { [info exists insertXFrame] && $insertXFrame } {
        HTTP::header insert "X-Frame-Options" "SAMEORIGIN"
    }
}