Forum Discussion

Albert_252822's avatar
Albert_252822
Icon for Nimbostratus rankNimbostratus
Mar 07, 2016
Solved

Open redirect mitigation

Hi all,   I'm new to F5 and probably this is a very basic question. I'd like to know your advice on mitigating an open redirect vulnerability, as could be http://www.vulnerable.com/redirect.asp?=h...
ASM Advanced WAF
open redirect
security
Albert_252822's avatar
Albert_252822
Icon for Nimbostratus rankNimbostratus

Hi Vijith,

 

Thanks for your answer, that's very useful information. However, I only see the option to block the redirection and I'd like to allow the redirection to the non whitelisted domains/subdomains adding a message which the user have to accept before being redirected.

 

Vijith_182946's avatar
Vijith_182946
Icon for Cirrostratus rankCirrostratus
Mar 09, 2016
I suppose you need to utilise iRule in this case.