Forum Discussion
Nishal_Rai
Cirrocumulus
CirrocumulusMitigating Stored XSS Attacks with F5 Big-IP ASM: Insights Needed
Hello Everyone, Could someone provide insights into how F5 Big-IP ASM handles stored XSS attacks? My understanding is that ASM primarily focuses on inspecting and enforcing XSS signature set...
Amine_Kadimi
MVP
MVPI suggest you enable signature enforcement for server responses. In a lab environment it should be OK but in production it might impact the performance of the app
Daniel_WolfMVP
MVPYes, that's what I said. Signatures can be enforced also on responses.
- Nishal_Rai
Amine_KadimiDaniel_Wolf
Sorry for the late response.
Regarding signature enforcement on the responses, I selected the following signature set.The log events of the application:
On the file types specification of the response signatures:What would be the appropriate file types, since the script is stored on a message box.
Since the above mentioned signature was unable to detect the stored XSS payload in the response.
