Bug ID 1016433: URI rewriting is incorrect for "data:" and "javascript:"

Last Modified: Jul 30, 2021

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 16.0.0, 16.0.0.1, 16.0.1, 16.0.1.1, 16.0.1.2, 16.1.0

Opened: May 05, 2021
Severity: 3-Major

Symptoms

In case of LTM rewrite, HTML content having attribute values like "javascript:", "mailto:", "data:" etc are incorrectly rewritten as URI. This can cause web applications to fail.

Impact

Incorrect URI rewriting may cause web application to fail.

Conditions

-- LTM rewrite profile in URI translation mode. -- HTML contents of web application contains attribute values like "javascript:abc", "data:" etc.

Workaround

None

Fix Information

None

Behavior Change