Bug ID 569309: Clientside HTML parser does not recognize HTML event attributes without value

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1

Fixed In:
13.0.0, 12.1.2, 11.6.1 HF2

Opened: Jan 22, 2016

Severity: 3-Major

Symptoms

Assignment of a specific HTML content to tag.innerHTML might lead to a JavaScript error. This happens when one or more of tags in HTML text contain HTML event attributes without assigned values (such as <div onclick />). Error messages similar to the following are logged in the browser JavaScript console: Unable to get property 'charAt' of undefined or null reference.

Impact

Web application does not work when accessed through Portal Access.

Conditions

Dynamically created HTML page with event attributes without values, for example: <div onclick />

Workaround

You can use a customized iRule to handle a specific application.

Fix Information

Now empty inline event handler attributes are not rewritten on the client side.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips