Last Modified: Jul 13, 2024
Affected Product(s):
BIG-IP APM
Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.6.1, 12.0.0, 12.0.0 HF1, 12.0.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2
Fixed In:
13.0.0, 12.1.2, 11.6.1 HF1
Opened: Apr 21, 2016 Severity: 3-Major Related Article:
K80124134
Empty URI must be rewritten at server side and client side rewriter in the same way: as empty URI (all browsers treat this type of URI in a specific way).
Web application malfunction, such as incorrect or unexpected behavior or error messages.
A tag with an empty 'src' or 'href' attribute.
Use an application-specific iRule that modifies the empty URI. -- For example, for JavaScript methods such as setAttribute(), an iRule should change this: 'F5_Invoke_setAttribute(o, "src", uri)' to this: '(uri=="")?o.setAttribute("src", uri):F5_Invoke_setAttribute(o, "src", uri)'. -- As another example, for JavaScript methods such as write(str), writeln(str), innerHTML=str, outerHTML=str, and similar methods, if str contains <img src="" ... >, the iRule must remove the src attribute.
This release fixes the issue of rewriting the empty URI the same way at the server side and client side: as empty URI (all browsers treat this type of URI in a specific way).