Forum Discussion
Jason_105955
Nimbostratus
NimbostratusObfuscate URI's?
Greetings!
Has anyone any ideas on ways to create an iRule that will obfuscate URI's used (and returned in the HTTP payload)?
We've inherited a problem with a very badly written ap...
hoolio
Cirrostratus
CirrostratusWell, after ~500 lines and a few long nights, we have a working first version of a rule which enforces a session in the app and encrypts the links in response headers/content. This prevents attackers from exploiting most of the vulnerabilities through forceful browsing. The next thing we're looking at is encrypting vulnerable parameter values in response content to really lock it down. ASM would have been nice here, but it wasn't an option in the time frame.
Aaron
