Forum Discussion

Mohanad_313515's avatar
Mohanad_313515
Icon for Nimbostratus rankNimbostratus
Jan 20, 2019

Strip HTTP Origin header based on its value before hit the ASM

Hi Everyone Our app using CORS, and it's working normally with correct origin headers: Origin: "://" [ ":" ] But also all mobile clients sending Origin header with value 'file://' this c...
ASM Advanced WAF
iRulesLX
security
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Jan 20, 2019

Hi Mohanad,

use the iRule below to remove every 

Origin
header that 
starts_with
the string 
file://
.

when HTTP_REQUEST {
    if { [HTTP::header value "Origin"] starts_with "file://" } then {
        HTTP::header remove "Origin"
    }
}

Cheers, Kai