For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Philip_Jonsson_'s avatar
Philip_Jonsson_
Icon for Altocumulus rankAltocumulus
Sep 12, 2018

SEC7111 HTTP Security Compromised Generated by a JavaScript.

Hey everyone!   I just ran into an issue that I haven't seen before. Let me give you some background:   We have a backend web application running only on port 80 and publish this through a stan...
application delivery
browser
javascript
LTM
ssl
Philip_Jonsson's avatar
Philip_Jonsson
Icon for MVP rankMVP
Sep 12, 2018

We're running 12.1.2 HF1. Do you mean using a Rewrite Profile?

 

Since we are using HTTP on the back-end I did a packet capture to see the traffic from the back-end server and I actually found where the link will appear. It's inside a JSON object as a key value. We must be able to change this using an iRule of some sort. Perhaps I was too general with my Stream Profile and need to translate the address together with the URI it might work better. Here is the output from the packet capture:

 

 

Do you have an idea on how we can best rewrite this URL inside the JSON object?