still same issue, kindly find the below filter detailes:
# Deny everything first and then allow specific entries
/0001 { /type "deny" /glob "*" }
/0002 { /type "allow" /method "POST" /url "/content/[.]*.form.html" }
/0003 { /type "allow" /glob "GET /libs/granite/csrf/token.json*" }
# Open consoles
/0011 { /type "allow" /url "/admin/*" } # allow servlet engine admin
/0012 { /type "allow" /url "/crx/*" } # allow content repository
/0013 { /type "allow" /url "/system/*" } # allow OSGi console
# Allow non-public content directories
/0021 { /type "allow" /url "/apps/*" } # allow apps access
/0022 { /type "allow" /url "/bin/*" }
/0023 { /type "allow" /url "/content*" } # disable this rule to allow mapped content only
/0024 { /type "allow" /url "/libs/*" }
/0025 { /type "deny" /url "/libs/shindig/proxy*" } # if you enable /libs close access to proxy
/0026 { /type "allow" /url "/home/*" }
/0027 { /type "allow" /url "/tmp/*" }
/0028 { /type "allow" /url "/var/*" }
/0029 { /type "allow" /url "/etc/*" }
/0030 { /type "allow" /url "/etc.clientlibs/*" }
/0031 { /type "allow" /url "/content/*" }
/0032 { /type "allow" /url "/libs/granite/csrf/token.json" }
/0033 { /type "allow" /glob "* /bin/xfaforms/submitaction*" } # to enable AEM Forms submission