Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

ottleydamian's avatar
ottleydamian
Icon for Cirrus rankCirrus
Aug 17, 2020

Replace X-Frame-Options value

I need help with my syntax because it is not identifying and changing the text/value as expected. The response header in question is: X-FRAME-OPTIONS: ALLOW-FROM https://my.identitymanager.com:84...
Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Aug 17, 2020

Hello Ottley.

Try this instead

HTTP::header replace X-Frame-Options "ALLOW-FROM https://biz.identitymanager.com:8443"

Regards,

Dario.

Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Aug 18, 2020

Or even this:

set XFO [string map -nocase {"my.identitymanager.com" "biz.identitymanager.com"} [HTTP::header value X-FRAME-OPTIONS]]
HTTP::header remove X-FRAME-OPTIONS
HTTP::header insert X-Frame-Options $XFO

Regards,

Dario.