For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dgytech's avatar
dgytech
Icon for Altostratus rankAltostratus
Dec 15, 2017

iRule to exclude specific URI from http header insert (x-frame-options) on http_response

Attempting to exclude two URI from a http header insert on a HTTP_RESPONSE. Basically if the URI contains "/wp-login.php" or "/wp-admin" i do not want this header applied on the response. I was pre...
iRules
LTM
security
Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
Dec 17, 2017

Lots of good answers above.

Just to explain the logic of the required structure reflected in the above irules ...

HTTP::uri is not valid in HTTP_RESPONSE

Valid Events:
ASM_REQUEST_DONE, CACHE_REQUEST, CACHE_RESPONSE, HTTP_CLASS_FAILED, HTTP_CLASS_SELECTED,
HTTP_PROXY_REQUEST, HTTP_REQUEST, HTTP_REQUEST_DATA, HTTP_REQUEST_SEND, 
REWRITE_REQUEST_DONE, SERVER_CONNECTED

So you need to set a flag in HTTP_REQUEST that controls the HTTP_RESPONSE action. I hope this helps.