For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jacqueline's avatar
Jacqueline
Icon for Nimbostratus rankNimbostratus
Jan 09, 2020

What causes the TSbd/TSbp script to be inserted into the source code of a website?

In the source code of the website I work on I see that the script below is being inserted. <script type="text/javascript"> //<![CDATA[ window["_tsbp_"] = { ba : "X-TS-BP-Action", bh : "X-TS-AJAX-...
ASM Advanced WAF
javascript
script
security
TSbd
TSbp
NUT2889's avatar
NUT2889
Icon for Cirrostratus rankCirrostratus
Jan 13, 2020

Hi,

 

This is the machanism of ASM to validate cookie.

 

The BIG-IP ASM system validates these cookies returning from the clients to ensure that the cookies are not modified. In BIG-IP ASM 11.4.0 and later, a random security key is generated uniquely to each deployment and combined with a configurable encryption algorithm to provide a security context for cookie protection.

 

You can refer more detail over here https://support.f5.com/csp/article/K6850