For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Lee_Duff_53920's avatar
Lee_Duff_53920
Icon for Nimbostratus rankNimbostratus
Oct 20, 2006

Removing URI from Browser

Hi,

 

 

We have a customer who has a security requirement that the URI of pages arent displayed within the browser.

 

 

For example, they access www.test.com and this may load www.test.com/index/page1.html. However, they only want www.company.com displayed in the browser no matter what page they are viewing?

 

 

Is this possible?

 

 

Thanks,

 

application delivery
dev
devops
iRules

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 20, 2006
    Hello,

     

     

    This isn't possible based on the way HTTP works. If a user accesses the root document of a web application, the URI is /. When they click on a link within the page content, that URI is displayed in the browser when the HTTP response is received from the web application. There is no way that I can think of to completely prevent a client from knowing what directories/pages they are accessing when using a standard browser.

     

     

    You could use javascript on the client side or Flash to mask the resources from the client, but anyone using a browser plugin, interception proxy or sniffer would still be able to see what they are accessing within the web application.

     

     

    Aaron