inteligr8/alfresco-community-repo
1
0
Fork 0
mirror of https://github.com/Alfresco/alfresco-community-repo.git synced 2025-08-07 17:49:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merged HEAD to 5.2.N (5.2.1)

Browse Source 
134344 kroast: ALF-21809 - The Community admin console isn't using the CSRF prevention token

git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/BRANCHES/DEV/5.2.N/root@134918 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Kevin Roast
2017-02-06 09:16:58 +00:00
parent 0dcbf73da3
commit 0ec271c0b7
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
source/web/WEB-INF/web.xml
View File

@@ -246,6 +246,16 @@
<filter-name>CSRF Token Filter</filter-name> <filter-name>CSRF Token Filter</filter-name>
<url-pattern>/s/enterprise/admin/*</url-pattern> <url-pattern>/s/enterprise/admin/*</url-pattern>
</filter-mapping> </filter-mapping>
<filter-mapping>
<filter-name>CSRF Token Filter</filter-name>
<url-pattern>/service/admin/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>CSRF Token Filter</filter-name>
<url-pattern>/s/admin/*</url-pattern>
</filter-mapping>
<!-- Enterprise filter-mapping placeholder --> <!-- Enterprise filter-mapping placeholder -->