Last Modified: Oct 07, 2023
Affected Product(s):
BIG-IP FPS
Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1
Fixed In:
14.0.0
Opened: Jun 27, 2017 Severity: 4-Minor
SR 1-3168243165
URLs which are equivalent by RFC are treated as different by FPS, which hinders FPS protection.
Only one URL of the form "/path/to/resource/" or "/path/to/resource" is configured as protected.
Configure both URLs: /path/to/resource/ /path/to/resource as protected with identical configuration.
FPS matching now ignores trailing slashes, and disallows trailing slashes in configured URLs.