Your achievements

Level 1

0% to

Level 2

Tip /
Sign in

Sign in to Community

to gain points, level up, and earn exciting badges like the new
Bedrock Mission!

Learn more

View all

Sign in to view all badges

mehmetsezgin
mehmetsezgin
Offline

Badges

Badges
3

Accepted Solutions

Accepted Solutions
0

Likes Received

Likes Received
3

Posts & Comments

Posts & Comments
3

Discussions

Discussions
1

Questions

Questions
0

Ideas

Ideas
0

Blog Posts

Blog Posts
0
Top badges earned by mehmetsezgin
Customize the badges you want to showcase on your profile
Re: Disable CSRF on AEM 6.3 - Adobe Experience Manager 20-08-2019
Thanks JaideepBrar​.As i mentioned CSRF framework is sending empty token to browser. For our case should we still keep token.json calls?

Views

9.0K

Like

1

Replies

1
Re: Disable CSRF on AEM 6.3 - Adobe Experience Manager 20-08-2019
Thanks Arun.Publisher responds with empty token to csrf requests. Since users are not authenticated.I think excluded path is used bypass csrf token check for certain destinations.https://taylor.callsen.me/security-and-java-servlets-in-aem-6-1/ Our goal is stop browser's csrf token requests so dispatcher will not have to handle them.

Views

9.0K

Like

1

Replies

3
Disable CSRF on AEM 6.3 - Adobe Experience Manager 20-08-2019
Hi Community,Our customer web site doesn't have any authenticated user. All users are anonymous. Components have granite.jquery dependency so csrf protection is enabled automatically.Dispatcher and publisher instance receiving too many unnecessary csrf token requests.Is there any way to disable csrf protection on AEM 6.3?Thanks in advance.Mehmet

Views

9.5K

Like

1

Replies

10