Bug ID 592868: Rewrite may crash processing HTML tag with HTML entity in attribute value

Last Modified: Apr 28, 2025

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.5.3, 11.5.3 HF1, 11.5.3 HF2, 11.5.4, 11.5.4 HF1, 11.5.4 HF2, 11.6.1, 12.0.0, 12.0.0 HF1, 12.0.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2

Fixed In:
13.0.0, 12.1.2, 11.6.1 HF1, 11.5.4 HF3

Opened: May 12, 2016

Severity: 2-Critical

Symptoms

If HTML page contains HTML entities in attribute values, rewrite may crash processing this page.

Impact

Web application may not work correctly.

Conditions

HTML tag like this: <script src="&#10;" type="text/javascript"></script>

Workaround

In most cases HTML entities can be replaced by appropriate characters by iRule.

Fix Information

Now rewrite correctly handles HTML entities in attribute values.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips