Adding escape urls to csrf gurad

8 years ago · b74ea7baca
parent b267d7eda0
commit b74ea7baca
1 changed files with 5 additions and 2 deletions
--- a/modules/core/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties
+++ b/modules/core/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties
@ -462,6 +462,9 @@ org.owasp.csrfguard.unprotected.storeRestApi=%servletContext%/api/appm/store/*
 org.owasp.csrfguard.unprotected.certificateMgtRestApi=%servletContext%/api/certificate-mgt/*
 org.owasp.csrfguard.unprotected.deviceMgtRestApi=%servletContext%/api/device-mgt/*
 org.owasp.csrfguard.unprotected.dcrRestApi=%servletContext%/dynamic-client-web/*
+org.owasp.csrfguard.unprotected.deviceMgtSSOAcs=%servletContext%/devicemgt/uuf/sso/acs
+org.owasp.csrfguard.unprotected.deviceMgtAcs=%servletContext%/uuf/sso/acs
+org.owasp.csrfguard.unprotected.deviceMgtApi=%servletContext%/devicemgt/api/invoker/execute/*
 
 #carbon
 org.owasp.csrfguard.unprotected.Services=%servletContext%/services/*