For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

StephanManthey's avatar
StephanManthey
Icon for Nacreous rankNacreous
Feb 24, 2015

Hi Dietmar,

I´m not sure, what this line is good for as it will be a single value only: 
foreach excludeCookieName $static::LOGOUT_COOKIE_EXCLUDE {

Removed the section: 

when RULE_INIT {
    set static::LOGOUT_URI                  "/logout"
    set static::LOGOUT_COOKIE_EXCLUDE       {"BIGip_SSO_"}
}

when HTTP_REQUEST {

if {[HTTP::uri] starts_with $static::LOGOUT_URI} {
    set cookieResponse "Connection Close "
     Iterate over all cookies
    foreach cookieName [HTTP::cookie names] {
        if { $cookieName ne $static::LOGOUT_COOKIE_EXCLUDE }  {
            if { [HTTP::cookie $cookieName] ne "" } {
                set cookieResponse "$cookieResponse\"Set-Cookie\" \"[call /Common/RBUTIL::get_expired_cookiestring $cookieName]\" "
                set cookieResponse "$cookieResponse\"Set-Cookie\" \"[call /Common/RBUTIL::get_expired_cookiestring $cookieName [HTTP::host] 0]\" "
                set cookieResponse "$cookieResponse\"Set-Cookie\" \"[call /Common/RBUTIL::get_expired_cookiestring $cookieName 0 0]\" "
                set cookieResponse "$cookieResponse\"Set-Cookie\" \"[call /Common/RBUTIL::get_expired_cookiestring $cookieName 0]\" "
            }   
        }   
    } 
    if { $debugLevel > 1} { log local0.debug "$logPrefix Cookie logout sequence: $cookieResponse" }
    eval HTTP::respond 200 $cookieResponse
    unset cookieResponse
    return
}   
}

Perhaps a slightly reduced version solves the issue?

Thanks, Stephan