Let iRules Work Around that ASP.NET Padding Oracle Attack

@Bertand This solution applies pre and post-3.5SP1 unless I'm reading the advisory wrong.

 

 

@Matt I only implemented the specified workaround, not any additional recommendations. You are correct in that you could add a delay, but would be better without the variable, and would look more like this:

 

 

after [expr [expr { int(10000 * rand()) }] +2000]