For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

refra_151287's avatar
refra_151287
Icon for Cirrus rankCirrus
Nov 11, 2015

URL Hashing OR URL decoding

I've an issue, and we want to hash the URI (or encoding) in other words I don't want the user to see the original URL that the server sent, we want the user to see just decoded value, is there any wa...
application delivery
devops
iRules
Brad_Parker_139's avatar
Brad_Parker_139
Icon for Nacreous rankNacreous
Nov 12, 2015

You understand that this will require you to rewrite every resource on the site that the server sends in its responses. This will not be an easy task. Any particular reason you want to do this? Would it be easier to sanitize specific data?

 

refra_151287's avatar
refra_151287
Icon for Cirrus rankCirrus
Nov 12, 2015
it's a customer request, I offered all changes he can use to protect the parameter, or the url such as dynamic parameter tampering, url flow, login enforcement, but he want to encode the url, till now i don't know the reason for security reasons at the info sec team, and it's a financial firm . so i'm trying to encode the uri in the response and decode the request form the client, but i'm still in the beginning, so i'm asking if there's any irule to accelerate the progress, even if it did an issues, just to convince them :)