Forum Discussion

Philip_Jonsson_'s avatar
Philip_Jonsson_
Icon for Altocumulus rankAltocumulus
Sep 12, 2018

SEC7111 HTTP Security Compromised Generated by a JavaScript.

Hey everyone!   I just ran into an issue that I haven't seen before. Let me give you some background:   We have a backend web application running only on port 80 and publish this through a stan...
application delivery
browser
javascript
LTM
ssl
RossVermette's avatar
RossVermette
Icon for Nimbostratus rankNimbostratus
Sep 13, 2018

You could try the following: Apply a "stream" profile to your existing vs, and apply the following irule:

when HTTP_RESPONSE {
  if { HTTP::header value Content-Type] contains "application/json"} {
    STREAM::expression "@http://@https://@"
    STREAM::enable
  }
}