CSRF fixed for /devicemgt/api

8 years ago · 618ee3d01a
parent d0e3ae5106
commit 618ee3d01a
1 changed files with 1 additions and 1 deletions
--- a/modules/analytics/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties
+++ b/modules/analytics/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties
@ -456,4 +456,4 @@ org.owasp.csrfguard.unprotected.ml=%servletContext%/api/login*
 org.owasp.csrfguard.unprotected.passivests=%servletContext%/acs/*
 org.owasp.csrfguard.unprotected.deviceMgtSSOAcs=%servletContext%/devicemgt/uuf/sso/acs
 org.owasp.csrfguard.unprotected.deviceMgtAcs=%servletContext%/uuf/sso/acs
-org.owasp.csrfguard.unprotected.deviceMgtApi=%servletContext%/devicemgt/api/invoker/execute/*
+org.owasp.csrfguard.unprotected.deviceMgtApi=%servletContext%/devicemgt/api/*