Forum Discussion
kridsana
Cirrocumulus
CirrocumulusASM insert CSRF although not specify URL
Hi
We're using LTM/ASM with v.12.1.3
and right now we see issue as we have enable CSRF protection but we didn't specify and URL in URL list.
From my understanding, F5 should insert csr...
Boggs_5738
Nimbostratus
Nimbostratussee https://support.f5.com/csp/article/K11930 | Configuring CSRF protection
In the URLs List, click the URLs you want the system to examine.
Add at least one URL to the list. The system considers all URLs that are not in the list to be safe, unless another problem is discovered.
Note: Type the URL in the format: /index.html, /*/index.php, or /index.?html.
if you enable the CSRF feature, you need to specify a URL.