Forum Discussion

Suwatchai_Ch__2's avatar
Suwatchai_Ch__2
Historic F5 Account
Apr 03, 2013

Man-in-the-Browser

Have anyone find the way to mitigate the "Man-in-the-Browser" thread? I am wondering if we can write irules to mitigate this?   Please see detail of thread in http://www.trusteer.com/Solutions/m.....
application delivery
dev
devops
iRules
Suwatchai_Ch__2's avatar
Suwatchai_Ch__2
Historic F5 Account
Apr 03, 2013
Addtional clarification to my post.

 

 

Folks, has anyone come across security requirement to checksum HTML page to make sure what the server sends out is the same as what is finally loaded in the browser, to ensure there is no hacked java script injection in an infected browser? Hacked java script usually is used to send user id and password to hacker's machine.

 

Pavel_Jurik_707's avatar
Pavel_Jurik_707
Icon for Nimbostratus rankNimbostratus
Nov 01, 2013
Hi Suwatchai, have you found some solution? thanks pavel