Bug ID 756394: Portal Access: client-side URL rewriter incorrectly replaces '..' with 'f5-w-doubledot' in query

Last Modified: Nov 15, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 15.0.0, 15.0.1

Opened: Jan 24, 2019
Severity: 3-Major

Symptoms

Via Portal Access, web-application generates requests on which '..' in the query portion of URL is replaced by 'f5-w-doubledot'.

Impact

Web-application does not function as expected.

Conditions

Client-side JavaScript code produces a URL with '..' in query part.

Workaround

Use a custom iRule to workaround this issue.

Fix Information

None

Behavior Change