Post method with html extensions

[Keerthi97]

Hi All,

I need to block my post configuration on aem dispatcher first and allow only required selectors with extensions on the dispatcher filters.

So, could you please suggest on the way or whether the below filter will allow the post method with html extensions for configuring into the dispatcher.

//001 { /type "allow" /method "POST" /url "/content/[.]*.html}

Thanks in advance.

[Sanket_Kumbharkhane · Accepted solution]

Hi @Keerthi97 ,

if you use the below 1st rule in your filters. any file

/0001 { /type "deny"  /url "*" }

It will deny everything for you including Get and Post [comes as the best practices]

and after that, you can allow POST requests.

Here are few examples to allow the post method with html & json extension

## allow POSTs to form selectors under content

/0002 { /type "allow" /method "POST" /url "/content/[.]*.form.html" }

## allow POSTs to update the shopping cart

/0003 { /type "allow" /method "POST" /path "/content/[.]*.commerce.cart.json" } 

/filter {
   /0001 { /type "deny"  /url "*" }
   /0002 { /type "allow" /method "POST" /url "/content/[.]*.form.html" } 
   /0003 { /type "allow" /method "POST" /path "/content/[.]*.commerce.cart.json" } 
}

[Keerthi97]

Thanks for your answer @Sanket_Kumbharkhane 

[Keerthi97]

Hi @Sanket_Kumbharkhane ,

In the case of allowing post method with html extensions ,whether it is possible to give filter condition as mentioned in my question.

[Sanket_Kumbharkhane]

yes @Keerthi97 , it looks good and can try on a lower environment or Stage first before pushing it to production.

[Sriga311]

Hi @Sanket_Kumbharkhane ,

In my scenario, I am having post servlet calls modified in the form of resource types instead of /bin/, so could you please suggest some filters to refine and allow the POST servlets present in my project. Also , there are no identical selectors used in forms present in my application.

Thanks for your help