Merge pull request #1726 from rasika/master

Fix the CSRF issue when accessing mobile api
This commit is contained in:
Rasika Perera 2018-02-28 22:53:18 +05:30 committed by GitHub
commit f79d985790
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -466,7 +466,7 @@ org.owasp.csrfguard.unprotected.deviceMgtAcs=%servletContext%/uuf/sso/acs
org.owasp.csrfguard.unprotected.deviceMgtApi=%servletContext%/devicemgt/api/*
org.owasp.csrfguard.unprotected.storeEventPublisher=%servletContext%/store/apis/eventpublish/*
org.owasp.csrfguard.unprotected.publisherAcs=%servletContext%/publisher/acs
org.owasp.csrfguard.unprotected.publisherApi=%servletContext%/publisher/api
org.owasp.csrfguard.unprotected.publisherApi=%servletContext%/publisher/api/*
org.owasp.csrfguard.unprotected.storeAcs=%servletContext%/store/acs
org.owasp.csrfguard.unprotected.apiStoreAcs=%servletContext%/api-store/acs
org.owasp.csrfguard.unprotected.apiStoreApis=%servletContext%/api-store/apis/*