From 0ec271c0b7a9530f30461a9dac14c267076b84f2 Mon Sep 17 00:00:00 2001
From: Kevin Roast <kevin.roast@alfresco.com>
Date: Mon, 6 Feb 2017 09:16:58 +0000
Subject: [PATCH] Merged HEAD to 5.2.N (5.2.1)    134344 kroast: ALF-21809 -
 The Community admin console isn't using the CSRF prevention token

git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/BRANCHES/DEV/5.2.N/root@134918 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
---
 source/web/WEB-INF/web.xml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/source/web/WEB-INF/web.xml b/source/web/WEB-INF/web.xml
index 1412d0a039..b03a2196bc 100644
--- a/source/web/WEB-INF/web.xml
+++ b/source/web/WEB-INF/web.xml
@@ -246,6 +246,16 @@
       <filter-name>CSRF Token Filter</filter-name>
       <url-pattern>/s/enterprise/admin/*</url-pattern>
    </filter-mapping>
+   
+   <filter-mapping>
+      <filter-name>CSRF Token Filter</filter-name>
+      <url-pattern>/service/admin/*</url-pattern>
+   </filter-mapping>
+
+   <filter-mapping>
+      <filter-name>CSRF Token Filter</filter-name>
+      <url-pattern>/s/admin/*</url-pattern>
+   </filter-mapping>
 
    <!-- Enterprise filter-mapping placeholder -->