Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP APM
Known Affected Versions:
11.6.2 HF1, 11.4.0, 11.4.1
Fixed In:
11.6.0, 11.5.1 HF5, 11.4.1 HF9
Opened: May 24, 2014 Severity: 3-Major Related Article:
K35131437
JavaScript: It is possible to call the submit() method without explicit object, for example, in event handlers: <form action='/action.cgi/> <input type=button name=a onclick='submit()' value='Submit'> </form> Pressing the button, the form should be submitted. If the form has action with absolute path (as in this example), then non-rewritten path is used working via portal access.
This impact of this issue is the form is not submitted due to wrong action path used.
HTML page with form which has absolute action path and uses explicit submit() call.
This issue has no workaround at this time.
JavaScript: Now isolated submit() calls are handled correctly and form action paths are rewritten at such calls. The situation when a submit() call refers to a separate function is also supported.