Forum Discussion

Yozzer's avatar
Yozzer
Icon for Nimbostratus rankNimbostratus
Mar 07, 2012

XSS checks in irule

Hi     Can an irule check for special chars in a switch statement?       switch -glob [URI::decode [URI::query "?[HTTP::payload]" Param1]] {   "*<" {   set variable "x...
application delivery
dev
devops
iRules
Yozzer's avatar
Yozzer
Icon for Nimbostratus rankNimbostratus
Mar 12, 2012
This seemed to solve the null byte issue and simplified my irule checks:

 

 

if { [matchclass [string tolower [HTTP::payload]] contains xssblocked] }{

 

HTTP::respond 403 "Blocked"

 

 

Would just like to count the number of times the & char appears in the payload and throw an exception if there is more than 1 found. Any ideas?