Ove Lindstrm wrote... This is the CORS-problem (Cross-Origin Resource Sharing) Basically, there are two ways of doing this. 1. Have the external domain use a JSONP and implement that interface. (See http://stackoverflow.com/questions/13893361/access-control-allow-origin-localhost). 2. You can manipu...

Sham HC wrote... At CQ you need to custom implement for specific url.    In general AEM relies on web application/server firewall to protect.For your usecase use referrer header-based solution which can either be achieved using mod_rewrite [1] or something more elaborate like mod_security [2] on the...

By default Apache Sling Referrer Filter will block all the post requests, if I remove POST from 'Filter Methods' from  Apache Sling Referrer Filter it do allow, but i need specific URLS to be allowed not all the requests.Can some one please help me on this.