For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Squeak's avatar
Squeak
Icon for Cirrus rankCirrus
Sep 04, 2019

Rewrite issue with Portal Access

Hello,

I´ve a rewrite issue with a internal webpage that I´m publishing with Portal Access. The APM module adds "F5CH=I" to the image path and "F5CH=C" to the css path. 

 styles.css?F5CH=C
 /images/icon-search.png?F5CH=I

I found out that this is a known bug and I created an IRule to fix it.

when HTTP_REQUEST {
  set wtType [ACCESS::session data get session.policy.result.webtop.type]
  if {[ info exists wtType ] && $wtType == "full" } {
    if { !([HTTP::uri] starts_with "/f5-w") && ([HTTP::uri] contains "styles") && ([HTTP::uri] contains "/images")  } {
       log local0. "===>  Before  ====> [HTTP::uri] "
       HTTP::uri "/f5-w-MASKED_HEX$$[HTTP::uri]"
       log local0. " Corrected ====> [HTTP::uri] "
    }
  }
  unset wtType
}

But without any success.

Any suggestions what I´m missing?

application delivery
BIG-IP Access Policy Manager (APM)
iRules

1 Reply

  • Enes_Afsin_Al's avatar
    Enes_Afsin_Al
    Icon for MVP rankMVP
    Sep 04, 2019

    Hi Squeak,

    I think, you should use "||" operator instead of "&&" operator

    when HTTP_REQUEST {
	set wtType [ACCESS::session data get session.policy.result.webtop.type]
	if { [info exists wtType] && $wtType == "full" } {
		if { (not ([HTTP::uri] starts_with "/f5-w")) && (([HTTP::uri] contains "styles") || ([HTTP::uri] contains "/images")) } {
			log local0. "====> Before ====> [HTTP::uri] "
			HTTP::uri "/f5-w-MASKED_HEX$$[HTTP::uri]"
			log local0. "Corrected ====> [HTTP::uri]"
		}
	}
	unset wtType
}