AEM dispatcher post method configurations | Community
Skip to main content
S
Sriga
February 15, 2021
Solved

AEM dispatcher post method configurations

  • February 15, 2021
  • 2 replies
  • 4203 views

Hi All,

I would like to refine the post method configuration on dispatcher filters. So ,the idea is to block all the post methods in my repository on adding the below condition.

//001 {/type "deny" /method "POST" /url "/content*"}

The above filter blocks the entire post methods present in my content content . So ,I need to allow only the required post methods present on my project.

//002 {type "allow" /method "POST" url "/content/[.]*.html"}

Adding on the above filter would be allowing the required post method with html selectors. So, whether the above //002 filter is sufficient to allow all the content paths with post servlet calls without any blockage

Kindly suggest on the above and your ideas on allowing the post calls

Thanks.

 

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by SureshDhulipudi

yes, that should work.

Please see this

https://experienceleague.adobe.com/docs/experience-manager-dispatcher/using/configuring/dispatcher-configuration.html?lang=en#enabling-access-to-vanity-urls-vanity-urls

 

Example Filter: Enable POST Requests

The following example filter allows submitting form data by the POST method:

/filter {
    /0001  { /glob "*" /type "deny" }
    /0002 { /type "allow" /method "POST" /url "/content/[.]*.form.html" }
}

2 replies

arunpatidar
Community Advisor
arunpatidarCommunity Advisor
Community Advisor
February 15, 2021

Hi,

you can create your servlet with some selectors and allow only those selector requests to avoid other open post request url as well from your project. Though I am not sure about your use case.

Arun Patidar
    SureshDhulipudi
    Community Advisor
    SureshDhulipudiCommunity AdvisorAccepted solution
    Community Advisor
    February 15, 2021

    yes, that should work.

    Please see this

    https://experienceleague.adobe.com/docs/experience-manager-dispatcher/using/configuring/dispatcher-configuration.html?lang=en#enabling-access-to-vanity-urls-vanity-urls

     

    Example Filter: Enable POST Requests

    The following example filter allows submitting form data by the POST method:

    /filter {
    /0001  { /glob "*" /type "deny" }
    /0002 { /type "allow" /method "POST" /url "/content/[.]*.form.html" }
}
      S
      Sriga311
      Level 2
      February 15, 2021

      Thanks suresh .

      But my question is it would not be blocking the post method servlet calls other than form data.

      Terms & ConditionsAccessibility statement

      Loading footer...