For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Alan_Oktay_1019's avatar
Alan_Oktay_1019
Icon for Nimbostratus rankNimbostratus
Jun 11, 2009

Static Content Values and Wildcards

Hey there.

 

 

Working on my first app. One of the User Input Values on a Parameter is the two-letter designation for states.

 

 

The ASM has recognized the Parameter Value Type as Static. In this case, I know the listing will always be two letters representing the state abbreviations.

 

 

Is there a way to wildcard this (know it is a little bit less secure) so that I do not have to enter all 50 state abbreviations as static values?

 

 

Thanks for any help...

 

Alan
app sec
BIG-IP Access Policy Manager (APM)
security

2 Replies

  • Ido_Breger_3805's avatar
    Ido_Breger_3805
    Historic F5 Account
    Jun 11, 2009
    Yes, you can change the parameter type value to be "user-input" and limit the length to 2 bytes.

     

    You probably won't lose any security because of that.
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jun 15, 2009
    You could also limit the parameter value to two alpha characters using a regex:

     

     

    [a-z][a-z]

     

     

    or for upper and lowercase letters:

     

     

    [a-zA-Z][a-zA-Z]

     

     

    Aaron