Is there a way to bypass CSRF filter only for some pages?

  • Document ID:KM03788047
  • Creation Date:28-Feb-2021
  • Modified Date:28-Feb-2021
    • Micro Focus Products:
      project and portfolio management 9.61

This document has not been formally reviewed for accuracy and is provided "as is" for your convenience.

Summary

.

Question

How to bypass CSRF filter on certain pages?

Answer

You can use parameter CSRF_BYPASS_URLS and point it to the page you want to bypass like below:

com.kintana.core.server.CSRF_BYPASS_URLS=/itg/web/knta/crt/RequestSearchXlsxExport.jsp,/itg/web/knta/crt/RequestSearch.jsp