Bug ID 492570: JavaScript error during CSRF protection

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0, 11.6.0 HF4

Opened: Nov 23, 2014

Severity: 1-Blocking

Symptoms

Since Javascript is executed on client side. When it comes to page render, javascript errors might break your page.

Impact

Since Javascript is executed on client side. When it comes to page render, javascript errors might break your page.

Conditions

Using Internet Explorer 8 with CSRF ASM enabled.

Workaround

N/A

Fix Information

After upgrading to BIG-IP version 11.6.0, using Internet Explorer 8, there is no longer the JavaScript error "Object doesn't support this action" when using the CSRF protection feature. Note that despite the error message, there was CSRF protection.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips