fixing CSRF issue in IOT server login

8 years ago · da44554243
parent 7286c37533
commit da44554243
1 changed files with 3 additions and 0 deletions
--- a/modules/analytics/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties
+++ b/modules/analytics/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties
@ -454,3 +454,6 @@ org.owasp.csrfguard.unprotected.JsApi=%servletContext%/portal/apis/analytics/*
 org.owasp.csrfguard.unprotected.Servlet=%servletContext%/analytics-api/*
 org.owasp.csrfguard.unprotected.ml=%servletContext%/api/login*
 org.owasp.csrfguard.unprotected.passivests=%servletContext%/acs/*
+org.owasp.csrfguard.unprotected.deviceMgtSSOAcs=%servletContext%/devicemgt/uuf/sso/acs
+org.owasp.csrfguard.unprotected.deviceMgtAcs=%servletContext%/uuf/sso/acs
+org.owasp.csrfguard.unprotected.deviceMgtApi=%servletContext%/devicemgt/api/invoker/execute/*