Forum Discussion

Nimbostratus

Feb 29, 2012

iRule to mitigate CSRF

Some of our application developers are asking about an iRule that could possibly insert a nonce onto a page during a session that would help prevent a cross-site request forgery from happening. Unfor...

Cirrostratus

Feb 29, 2012

Hi Chris,

There is built in functionality to do this in the Application Security Manager (ASM). I guess it's technically possible to do in an iRule--but it would be complicated to try to parse each parameter from the response HTML and inject the nonce.

Aaron

Forum Discussion

iRule to mitigate CSRF

Recent Discussions

BWC iRule

Citrix XenServer Big-IP Upgrade help

iRule condition - request contains more than 10000 parameters

Hi All, We have viprion 4300 with 4450 blades with 6 blades all blades having same configuration

Can iRule be used to perform exception of IPI category based on Geolocation

Related Content

iRule to mitigate TLS/SSL FREAK?

SSL passthrough VIP - mitigating birthday attack

Log4j iRule mitigation as described in K59329043 - which encoding is the regex using ?

iRULE regsub error

irule to mitigate HTTP de-sync attack