Merge pull request #258 from chaturadilan/master

security fixes

modules/core/distribution/src/repository/conf/security/Owasp.CsrfGuard.Carbon.properties

@@ -465,6 +465,13 @@ org.owasp.csrfguard.unprotected.dcrRestApi=%servletContext%/dynamic-client-web/*
 org.owasp.csrfguard.unprotected.deviceMgtSSOAcs=%servletContext%/devicemgt/uuf/sso/acs
 org.owasp.csrfguard.unprotected.deviceMgtAcs=%servletContext%/uuf/sso/acs
 org.owasp.csrfguard.unprotected.deviceMgtApi=%servletContext%/devicemgt/api/invoker/execute/*
+org.owasp.csrfguard.unprotected.storeEventPublisher=%servletContext%/store/apis/eventpublish/*
+org.owasp.csrfguard.unprotected.publisherAcs=%servletContext%/publisher/acs
+org.owasp.csrfguard.unprotected.storeAcs=%servletContext%/store/acs
+org.owasp.csrfguard.unprotected.apiStoreAcs=%servletContext%/api-store/acs
+org.owasp.csrfguard.unprotected.portalAcs=%servletContext%/portal/acs
+org.owasp.csrfguard.unprotected.socialAcs=%servletContext%/social/acs
+
  
 #carbon
 org.owasp.csrfguard.unprotected.Services=%servletContext%/services/*