Forum Discussion
F5Hopper_28651
Nimbostratus
NimbostratusRegex in iRule
Im making a rule to catch bad code being in HTTP POST.
for some reason we have some sites trying to do some sort of XSS attack, but posting URL strings in the POST and then they get a 500error. ...
Kevin_Stewart
Employee
EmployeeI'm specifically asking how you're testing the iRule. You wouldn't be able to just send a greater-than sign in the URI without encoding it, and the "Step" examples don't contain any greater-than signs.
In case you're just waiting for external requests with bad data, you can test locally with cURL:
curl -v http://www.example.com?test=%3cscript%3e -d "test=1234"