Forum Discussion

Philip_Jonsson_'s avatar
Philip_Jonsson_
Icon for Altocumulus rankAltocumulus
Sep 12, 2018

SEC7111 HTTP Security Compromised Generated by a JavaScript.

Hey everyone!   I just ran into an issue that I haven't seen before. Let me give you some background:   We have a backend web application running only on port 80 and publish this through a stan...
application delivery
browser
javascript
LTM
ssl
PeteWhite's avatar
PeteWhite
Icon for Employee rankEmployee
Sep 13, 2018

Presumably you have HSTS set and the browser is puking because you're aiming it at http. Is it possible to change the link on the server side? If not then use an iRule that looks purely for that URL ( the page URL, not the Javascript one ) and apply a stream profile only at that point.

pseudocode would be:

when HTTP_REQUEST
    if URI is in datagroup then set $stream = 1
when HTTP_RESPONSE
    if $stream = 1 then apply stream profile