Sling servlet blocked on rde but working on local

Question

hi all,

need little help with this issue - my sling servlet is working correctly on local but throwing blocked error on rde.

my local is also an SDK with same version as rde hence should not have been an issue.

my sling servlet is capturing data from couple of fields and sending it to servlet.

the ajax call is written as below -

$.ajax({
    type: "GET",
    url: "/bin/ACL/lookup.json",
    data: {
        cgn: cgn.toString(),
        cgi: cgi.toString(),
        name: name
    },
    success: function(resp) {
        console.log("Response is " + JSON.stringify(resp));
        location.reload(true);
    },
    error: function(XMLHttpRequest, textStatus, errorThrown) {
        alert("Status: " + textStatus);
        alert("Error: " + errorThrown);
    }
});

the data object is valid and forming correctly. the success function is not executing ofcourse and the error function is just displaying pop up with Status: Error

the servlet is registered by path and in the logs there are loggers for the get method but they are not being logged on rde.

Rohan_Garg · Accepted Answer

there's a call to the same page occurring with query params which is getting 200 ok and always following the servlet call.

on firefox the call is getting aborted by ns binding aborted error, this is due to another req aborting the first req. How can I resolve this?

Try removing the <form> tag if present or add event.preventDefault() on the click of submit button. This will ensure that the form submit action and ajax URL redirection do not conflict with each other.

NS_BINDING_ABORTED error is suggestive of ajax's URL and form submit's action both running and cancelling ajax request action.

BrianKasingli · Answer

It's probably because your local AEM runs on localhost:4502, and your rapid development environment runs on localhost:8080. Take a look at the network tab, and it is probably a CORS error. Take a look at the network tab, what do you see?

You need to configure your Configure Apache Sling Referrer Filter to allow all hosts names.

The Apache Sling Referrer Filter is a security feature that helps prevent Cross-Site Request Forgery (CSRF) attacks by checking the HTTP Referer header of incoming requests. When the filter is active, it ensures that requests to AEM's localhost:4502 only come from trusted sources (e.g., the AEM site itself) and not from unauthorized external domains.

If your local:8080 needs to make AJAX requests to the AEM environment running on localhost:4502, the Referrer Filter might block those requests, resulting in CORS issues.

Although this tutorial mentioned about how to enable "POST" from postman to your local AEM environment, I think it should give you more insight on how to setup the referrer filter, https://sourcedcode.com/blog/aem/how-to-make-simple-http-post-methods-in-aem-with-a-http-rest-client

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded