From 618ee3d01a392db4a5d9024837572acf3e2ed9a6 Mon Sep 17 00:00:00 2001 From: Rasika Perera Date: Wed, 18 Jan 2017 20:58:49 +0530 Subject: [PATCH] CSRF fixed for /devicemgt/api --- .../repository/conf/security/Owasp.CsrfGuard.Carbon.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/analytics/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties b/modules/analytics/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties index bf41e0ee..d3049ce3 100644 --- a/modules/analytics/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties +++ b/modules/analytics/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties @@ -456,4 +456,4 @@ org.owasp.csrfguard.unprotected.ml=%servletContext%/api/login* org.owasp.csrfguard.unprotected.passivests=%servletContext%/acs/* org.owasp.csrfguard.unprotected.deviceMgtSSOAcs=%servletContext%/devicemgt/uuf/sso/acs org.owasp.csrfguard.unprotected.deviceMgtAcs=%servletContext%/uuf/sso/acs -org.owasp.csrfguard.unprotected.deviceMgtApi=%servletContext%/devicemgt/api/invoker/execute/* +org.owasp.csrfguard.unprotected.deviceMgtApi=%servletContext%/devicemgt/api/*