Allow AEM Servlet only from allowed domains

[tkantk]

We have a requirement where we want to allow the Post Servlets only from certain domains. Our site is public so no user does not need to be authenticated, hence we are not able to control through CUG or using csrf-token. Is it possible to do something with Akamai or dispatcher where we block requests from other domain for a specific path. Also please keep in mind the the requests should not be hacked through Post man.

[arunpatidar]

Hi,

Please check

https://aem6solutions.wordpress.com/2015/06/19/apache-sling-referrer-filter/

 https://sourcedcode.com/blog/aem/in-aem-what-is-the-apache-sling-referrer-filter-osgi-configuration

[NehaCMS]

hi @tkantk - How had you handled the scenario mentioned above