Manual Chapter :
Configuring a CSS
injection
Applies To:
Show Versions
BIG-IP FPS
- 17.1.0, 17.0.0, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.0
Configuring a CSS
injection
CSS injection can only be performed in web pages in the anti-fraud profile where
JavaScript removal
detection
has been enabled on the URL of the web page.Configure a CSS injection on an anti-fraud profile
to improve phishing detection by embedding a CSS file on one or more web pages in the
anti-fraud profile.
- On the Main tab, click .The Anti-Fraud Profiles screen opens.
- From the list of profiles, select the profile on which you want to configure the CSS injection.The Anti-Fraud Profile Properties screen opens.
- In the Anti-Fraud Configuration area, selectAdvancedand thenPhishing Detection.The Phishing Detection screen opens.
- Select theEnabledcheck box for theInject into Application CSSsetting if you want the system to inject phishing detection CSS code into the real CSS file(s) specified in the anti-fraud profile.IfInject into Application CSSis enabled, theApplication CSS Locationsfield is displayed.
- In theApplication CSS Locationsfield, add the location(s) of the CSS file(s) in the web pages specified in the anti-fraud profile.
- If you did not enableInject into Application CSS, in theCSS Locationfield use the default file name and path (or specify a JavaScript removal protection file name and its path within the web application directory if instructed to do so by F5 support).
- This setting should not be changed without first consulting F5 support.
- This setting does not appear if you enabledInject into Application CSS.
- In theCSS Attribute Namefield, type an attribute name or use the default name.
- In the Anti-Fraud Configuration area, clickURL List.The URL List opens.
- For every URL in your profile with Phishing Detection enabled, perform the following steps:
- Click on the URL name in the URL List.The URL Properties screen opens.
- In the URL Configuration area, selectPhishing Detection.
- ClickAdvanced.
- In theLocation of CSS Link Injectionfield, select whether you want the CSS Link tag to be injected before or after the tag that you specify in theTagfield.
- In theLocation of CSS Element Injectionfield, select whether you want the CSS element, which triggers the CSS link, to be injected before or after the tag that you specify in theTagfield.
- ClickSavein the URL Properties screen.The Anti-Fraud Profile Properties screen opens.
- ClickSavein the Anti-Fraud Profile Properties screen.The anti-fraud profile is updated with the changes you made.
