kridsana
Feb 16, 2018Cirrocumulus
ASM insert CSRF although not specify URL
Hi
We're using LTM/ASM with v.12.1.3
and right now we see issue as we have enable CSRF protection but we didn't specify and URL in URL list.
From my understanding, F5 should insert csrf in case we specify URL in URL list.
Why F5 insert it although we not specift URL list?
Is it a bug?
ps1. we have issue when using IE11 but we didn't have issue when using chrome. ps2. when using IE11, issue is occur intermittently.
Thank you