For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

hatim1's avatar
hatim1
Icon for Nimbostratus rankNimbostratus
Nov 17, 2008

XSS scripting / false positive

Hi all,     My ASM xss script tag (paramter) signature is falsely triggered due to the following value of a couple of parameters:   initfunc(true,false,'Mandatory Field','Value cannot ...
app sec
BIG-IP Access Policy Manager (APM)
security
hatim1's avatar
hatim1
Icon for Nimbostratus rankNimbostratus
Nov 17, 2008
Hi,

 

 

Thanks for the quick response.

 

 

Actually all the 13 parameters being triggered by this signature have the same value provided in this thread!

 

It seems to be the only value used by the web developers.

 

 

Also, any idea on how the developers would adapt their code to minimize the risk of exposure would be greatly appreciated.

 

 

 

Thanks