Bug ID 891721: Anti-Fraud Profile URLs with query strings do not load successfully

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4

Fixed In:
16.0.0, 15.1.0.5, 15.0.1.4, 14.1.2.7

Opened: Mar 22, 2020

Severity: 3-Major

Symptoms

When a URL containing a query string is added to an anti-fraud profile, the BIG-IP config load fails: 010719d8:3: Anti-Fraud URL '/url\?query=string' is invalid. Every protected URL should be a valid non-empty relative path specified in lower case in the case insensitive Anti-Fraud profile '/Common/antifraud'. Unexpected Error: Loading configuration process failed.

Impact

After a BIG-IP config save, loading of new bigip.conf fails.

Conditions

Adding a query string to a URL for an anti-fraud profile.

Workaround

Follow this procedure: 1. Remove the escaping characters \ (backslash) for ? (question mark) in the bigip.conf file. 2. Load the configuration.

Fix Information

The issue has been fixed: Now Anti-fraud profile URLs support query strings such as /uri?query=data, and they can be successfully loaded.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips