Forum Discussion
IT_Support_-_EC
Jul 16, 2015Nimbostratus
Mr. Boneyard,
I got some good news for you. CSRF works now today after testing something but we got some strange issues to tell you and this is the message from our team who did test this CSRF;
"Hey bro, Don't give up. I've tested your case today and Good news is the CSRF has worked. But I have two strange cases, hope you can broaden my mind a little bit.
- The token was still not generated. (hovering the link)
- The CSRF now works. I recognize the difference between your test and mine, is that the appearance of the pair (test=test). Without it, the CSRF will not work. So with any URL list I want to protect that doesn't have (parameter=value), the CSRF protection will not work. Why ? Anything to overcome this problem ?
Btw, my F5 version: BIG-IP 11.5.1 Build 8.0.175 Hotfix HF8"
Thank you