Last Modified: Apr 28, 2025
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1
Fixed In:
14.1.0
Opened: Jul 30, 2018 Severity: 3-Major
When ajax blocking page is enabled within ASM policy it interferes with the web-app's ajax API's by hooking ajax responses. As a result ajax response isn't passed to a native response handler. The symptoms are ajax requests stuck or not being fired.
Ajax based web-app won't work properly.
- ASM Provisioned - ASM policy attached to a virtual - Ajax Blocking page enabled within asm policy
Disable Ajax Blocking page feature in asm policy.
ASM Ajax blocking response hooks are fixed to address the issue.