For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Steve_Brown_882's avatar
Steve_Brown_882
Historic F5 Account
Mar 14, 2008

Stream Breaking Flash Code

Hey Guys,   I am workig on moving one of our apps to our new box and have run into sort of a snag. We are using a stream profile to fix user uploaded content. Basically users should be uploading co...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Mar 14, 2008
Hello,

It would be good to restrict the stream filter to only text content types. The flash content should be "application/something-flash". This avoids checking potentially large binary content that you don't want to perform the replacement for anyhow. If you disable the stream filter by default and add an if statement to enable it for text response types, it should solve the issue you're seeing and make the rule more efficient.


when HTTP_RESPONSE {
    Disable the stream profile by default (so it's not left enabled for subsequent HTTP requests on the same TCP connection
   STREAM::disable
    Check if the response content type is text
   if {[HTTP::header value Content-Type] starts_with "text"}{
      STREAM::expression "@http://domain.@https://domain.@
      STREAM::enable
   }
}

Aaron
Related Content