Bug ID 848673: Portal Access message event has wrong origin if message originates from split tunneled frame

Last Modified: Sep 23, 2021

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
14.0.0,,,,,, 14.0.1,, 14.1.0,,,,,, 14.1.2,,,,,,,,, 14.1.3,, 14.1.4,,,,, 15.0.0, 15.0.1,,,,, 15.1.0,,,,,, 15.1.1, 15.1.2,, 15.1.3,, 15.1.4

Fixed In:

Opened: Nov 11, 2019
Severity: 3-Major


Unexpected exceptions, and other issues can be visible dependent on web-application internal logic.


Web-application does not operate as expected. Messages sent from the iframe with src=http://twitter.com to the main window with URL http://my.company.com can cause exception when receiving data.


Portal Access message hat originates from a split tunneled frame; for example, in a split tunneling configuration: REWRITE *://* BYPASS *://*twitter* *://*twimg*


Use a custom iRule to handle this situation.

Fix Information

Portal Access message event now has the correct origin if the message originates from a split tunneled frame.

Behavior Change