diff --git a/modules/core/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties b/modules/core/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties
index 62cb1c57..131b993f 100644
--- a/modules/core/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties
+++ b/modules/core/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties
@@ -471,7 +471,7 @@ org.owasp.csrfguard.unprotected.storeAcs=%servletContext%/store/acs
 org.owasp.csrfguard.unprotected.apiStoreAcs=%servletContext%/api-store/acs
 org.owasp.csrfguard.unprotected.apiStoreApis=%servletContext%/api-store/apis
 org.owasp.csrfguard.unprotected.portalAcs=%servletContext%/portal/acs
-org.owasp.csrfguard.unprotected.portalApis=%servletContext%/portal/apis
+org.owasp.csrfguard.unprotected.portalApis=%servletContext%/portal/apis/*
 org.owasp.csrfguard.unprotected.socialAcs=%servletContext%/social/acs
 org.owasp.csrfguard.unprotected.socialApis=%servletContext%/social/apis
 org.owasp.csrfguard.unprotected.appStoreDevices=%servletContext%/store/apps/devices/*