search

f5devcentral / f5-waf-policy-editor

Apache License 2.0
25 stars 14 forks source link

UI validation in Enforcer Cookie Settings #61

Open shubhammishra9 opened 2 years ago

shubhammishra9 commented 2 years ago
  1. If 'Maximum Cookie Header Length' is unset, json UI turns red. If not in use, option to remove "maximumCookieHeaderLength" can be provided

1

  1. "Secured over HTTPS connection" must be enabled when "Insert Same Site Attribute" is set to 'None Value'. UI-Validation can be added for this scenario Err. message: Dec 13 10:56:56 ip-172-31-20-26.ap-south-1.compute.internal nginx[2373]: { Dec 13 10:56:56 ip-172-31-20-26.ap-south-1.compute.internal nginx[2373]: "completed_successfully" : false, Dec 13 10:56:56 ip-172-31-20-26.ap-south-1.compute.internal nginx[2373]: "error_message" : "Failed to import Policy 'policy_name' from '/etc/app_protect/conf/waf-1639385507591.json': Could not add the Cookie 'cookie1'. Secured over HTTPS connection must be enabled when Insert Same Site Attribute is set to 'None Value' at /opt/app_protect/bin/../lib/perl/F5/ASMConfig/Entity/Cookie.pm line 54. Dec 13 10:56:56 ip-172-31-20-26.ap-south-1.compute.internal nginx[2373]: "error_line_number" : 19 Dec 13 10:56:56 ip-172-31-20-26.ap-south-1.compute.internal nginx[2373]: } 2
shubhammishra9 commented 2 years ago

Issue mentioned in point -1 is resolved and proper validation applied