Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

spars's avatar
spars
Icon for Altostratus rankAltostratus
Dec 07, 2021
Solved

iRule to Remove Duplicate Header by Value

Via iRule, trying to remove duplicate Strict-Transport-Security headers (developers are unable to), the below code does not seem to work.   when HTTP_REQUEST {     foreach a_header [HTTP::header "...
ASM Advanced WAF
irules
security
  • spalande's avatar
    spalande
    Dec 08, 2021

    You can use something like below

    when HTTP_RESPONSE {
    HTTP::header remove "Strict-Transport-Security"
    HTTP::header insert Strict-Transport-Security "max-age=2592000"
}
spalande's avatar
spalande
Icon for Nacreous rankNacreous
Dec 08, 2021

You can use something like below

when HTTP_RESPONSE {
    HTTP::header remove "Strict-Transport-Security"
    HTTP::header insert Strict-Transport-Security "max-age=2592000"
}