Forum Discussion

Philip_Jonsson_'s avatar
Philip_Jonsson_
Icon for Altocumulus rankAltocumulus
Sep 12, 2018

SEC7111 HTTP Security Compromised Generated by a JavaScript.

Hey everyone!   I just ran into an issue that I haven't seen before. Let me give you some background:   We have a backend web application running only on port 80 and publish this through a stan...
application delivery
browser
javascript
LTM
ssl
Philip_Jonsson's avatar
Philip_Jonsson
Icon for MVP rankMVP
Oct 05, 2018

I think it's nice to have an approved answer. All of the credits to go RossVermette who wrote the following iRule that solved the problem completely:

when HTTP_RESPONSE {
  if { HTTP::header value Content-Type] contains "application/json"} {
    STREAM::expression "@http://@https://@"
    STREAM::enable
  }
}