x-frame-options

Question

I have had to do multiple irules to set different x-frame-options.  So I have multiple irules setting x-frame-options, I want to write 1 irule that will pick the appropriate x-frame-option based on the host name that is returned.  I have been working on the irule below but it doesnt seem to insert the header and causes my site not to be accessible when applied to the VS.  The sites are SSL so can I not check the HTTP::host should I be grabbing the host another way?&nbsp;
when HTTP_REQUEST { 
set host [string tolower [HTTP::host]]&nbsp;
}&nbsp;
when HTTP_RESPONSE {
if {[$host eq ";]}
{
HTTP::header insert X-Frame-Options "ALLOW-FROM ;&nbsp;
}
else
{
HTTP::header replace X-Frame-Options "DENY"
}&nbsp;
}&nbsp;

pedinopa_170325 · Answer

I found the solution with Data Groups.&nbsp;
when HTTP_REQUEST { 
set host [string tolower [HTTP::host]
}
when HTTP_RESPONSE {
if {[class match  $host contains URLdatagroup]}
{
HTTP::header replace X-Frame-Options "ALLOW-FROM ;
}
else
{
HTTP::header replace X-Frame-Options "ALLOW-FROM ;
}&nbsp;
}&nbsp;

Forum Discussion

x-frame-options

1 Reply

Recent Discussions

import live updates from version x to version y

Tenant image upgrade

iRule editor partition button does not work

F5Access | MacOS Sonoma

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Related Content

Removing x-frame-options header from response when using APM

Clickjacking Protection Using X-FRAME-OPTIONS Available for Firefox

Set x-frames-options header values depending on URI

Inserting X-frame-Options, X-XSS-Protection, X-Content-Type-Options, Strict-Transport-Security

Configuring X-Frame-Options Allow-From