Forum Discussion

big_nerd_9769's avatar
big_nerd_9769
Icon for Nimbostratus rankNimbostratus
Oct 04, 2012

iRule to add "autocomplete off

Hello Everyone,

 

I have attempted to search high and low (internet search, devcentral search) to find this, and perhaps I am just missing it or perhaps not searching the right keywords.

 

I am about to undergo a PCI-DSS Audit, and wanted to know if I can use F5 to force all password fields on the site to add the autocomplete="off" attribute.

 

I am more than willing to do some reading if someone can point me in the right direction, however I have no experience with iRules.

 

Any help, tips, pointers anything would be apreciated.

 

application delivery
dev
devops
iRules
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Oct 04, 2012
    I am about to undergo a PCI-DSS Audit, and wanted to know if I can use F5 to force all password fields on the site to add the autocomplete="off" attribute.shouldn't it be text field rather than password field?

    can you try something like this? 

    [root@ve10:Active] config  b virtual bar list
virtual bar {
   snat automap
   pool foo
   destination 172.28.19.79:80
   ip protocol 6
   rules myrule
   profiles {
      http {}
      stream {}
      tcp {}
   }
}
[root@ve10:Active] config  b rule myrule list
rule myrule {
   when HTTP_REQUEST {
   STREAM::disable
   HTTP::header remove "Accept-Encoding"
}
when HTTP_RESPONSE {
   if {[HTTP::header value Content-Type] contains "text"} {
      STREAM::expression {@