Comment Protection

Hi Zafer, check out this link. This should help you remove comments from the developers HTML> It is a feature in LTM.

LTM HTML Content Profiles

You can use DataGuard feature in ASM . Even though HTML comments are not credit card / Social Security numbers they can still be sensitive data which should not leak to attackers.

Dataguard can mask the sensitive data with asterisks and raise a violation when comment is found.

You will need a Regular Expression for HTML comments, here is an example:

https://blog.ostermiller.org/find-comments-html