Bug ID 422527: innerHTML property improperly patched for SCRIPT and STYLE tags in input

Last Modified: Apr 28, 2025

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.4.0, 11.4.1

Fixed In:
11.5.0, 11.4.1 HF9

Opened: Jun 04, 2013

Severity: 3-Major

Related Article: K33904415

Symptoms

innerHTML property is improperly patched for SCRIPT and STYLE tags in its input if it should not be transformed.

Impact

F5_Inflate_innerHTML() wrapper improperly patches SCRIPT and STYLE tags if content should not be transformed. Web application malfunction.

Conditions

Example: ... var s=document.createElement("script"); var x="alert('test');"; s.innerHTML=x; document.head.appendChild(s); ...

Workaround

None

Fix Information

innerHTML property is inow roperly patched in case of SCRIPT and STYLE tags in its input.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips