Forum Discussion
Albert_252822
Nimbostratus
NimbostratusOpen redirect mitigation
Hi all,
I'm new to F5 and probably this is a very basic question. I'd like to know your advice on mitigating an open redirect vulnerability, as could be http://www.vulnerable.com/redirect.asp?=h...
Hi Albert,
You can do this by enabling the redirection protection Security > Application Security > Headers > Redirection Protection. ( assuming you have got 11.5.X) The below link will help to solve the problem !
Cheers,
Albert_252822Nimbostratus
NimbostratusHi Vijith,
Thanks for your answer, that's very useful information. However, I only see the option to block the redirection and I'd like to allow the redirection to the non whitelisted domains/subdomains adding a message which the user have to accept before being redirected.
Vijith_182946Cirrostratus
I suppose you need to utilise iRule in this case.- Albert_252822Yes, I supposed it. Thanks!