OPERATIONAL DEFECT DATABASE
...
...
Impact ... In this case, Portal Access replaces 'X-Frame-Option' header value with 'DENY' string. ... Browser cannot show the page received from back-end server due to restriction caused by 'X-Frame-Options: DENY' response header. ... Conditions ... -- Same-origin HTTP request with explicit default port number in origin URL, for example: GET /frame.html HTTP/1.1 Host: http://some.com Origin: http://some.com:80/index.html Such a request may be produced by the browser parsing the following HTML page: <head><base href=http://some.com:80/index.html ></head> <iframe src=frame.html></iframe> -- HTTP response from back-end server with 'X-Frame-Option: SAMEORIGIN' header. ... Use iRule to remove 'X-Frame-Options: DENY' response header when necessary. ... Fix Information ... Now Portal Access handles correctly any same-origin HTTP requests with default HTTP port in the origin URL. ... Behavior Change
F5 Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
