Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

SivaYenduri's avatar
SivaYenduri
Icon for Cirrus rankCirrus
Jul 16, 2020

iRules for inserting HTTP headers

Hello All,

 

Can someone help me with the iRules for adding the below headers in the HTTP_RESPONSE.

 

[Clear-Site-Data](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Clear-Site-Data)  

[Expect-CT](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT)  

[X-Permitted-Cross-Domain-Policies](https://owasp.org/www-project-secure-headers/) 

[X-Download-Options](https://blogs.msdn.microsoft.com/ie/2008/07/02/ie8-security-part-v-comprehensive-protection/

 

Thanks in advance!!!

1 Reply

  • Enes_Afsin_Al's avatar
    Enes_Afsin_Al
    Icon for MVP rankMVP
    Jul 16, 2020

    Hi SivaYenduri,

    when HTTP_RESPONSE {
	HTTP::header insert "Clear-Site-Data" "value"
	HTTP::header insert "Expect-CT" "value"
	HTTP::header insert "X-Permitted-Cross-Domain-Policies" "value"
	HTTP::header insert "X-Download-Options" "value"
}