Hi , Can you try to allow or whitelist the host name of your third party domain in “Allow Hosts” parameter (allow.hosts) of Apache Sling Referrer Filter .Sample reference https://taylor.callsen.me/security-and-java-servlets-in-aem-6-1/ Thanks,Sambasivaraja