Bug ID 652442: Portal Access might incorrectly rewrite certain JavaScript constructor calls

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0

Opened: Mar 20, 2017

Severity: 3-Major

Symptoms

The Portal Access module transforms intranet web application code to make it accessible via an APM virtual server. One of these transformations might incorrectly rewrite certain JavaScript constructor calls, though you might not see any immediate visible effect.

Impact

When Portal Access accesses the intranet application containing such code, 'obj.property' might be called instead of being constructed. As a result, the application might fail with a very obscure and difficult to diagnose errors.

Conditions

The issue affects execution of expressions similar to 'new obj[property]' with certain property names in the web-application JavaScript code.

Workaround

Use an iRule for each specific case. There is no global workaround.

Fix Information

Now Portal Access rewrite has improved rewriting of certain JavaScript expressions.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips