java - How to configure CSRF security in JSF -


in our applications, there inter war communications. 1 war sends http request other. one/first war made of jsp, struts have owasp csrf guard implemented , configured pages. other/second war made of spring, jsf. have <protected-views> <url-pattern>**/*.xhtml</url-pattern> configuration in faces-config.xml configuration file. when navigation first war enters second war. csrf security enabled second war.

this causes s problem blocking jsf's own flow throwing 403 forbidden access + csfr token null error. don't know how enable csrf jsf pages.

also, don't want disable csrf security. tried googling no help. dose 1 has examples or tutorials link. or guide me how same.

please find image attached.

chrome developer console

thanking in advance

regards

got issue resolved writing csrfformrenderer extending formrenderer. link here


Comments

Popular posts from this blog

service - Android MediaPlayer calls onCompletion before it already finished -

javascript - Training Neural Network to play flappy bird with genetic algorithm - Why can't it learn? -

javascript - Create a stacked percentage column -