Forum Discussion

L-CISIRH-BT-NET's avatar
L-CISIRH-BT-NET
Icon for Nimbostratus rankNimbostratus
Nov 02, 2018

CSRF protection blocks the whole website instead of csrf attacks only

Hi everybody Working on a VE 11.5.4 I need to activate the CSRF protection that my application does not provide.   The pb is that once activated, ASM blocks everything instead of a real attack. So...
ASM Advanced WAF
security
L-CISIRH-BT-NET's avatar
L-CISIRH-BT-NET
Icon for Nimbostratus rankNimbostratus
Nov 02, 2018

the code i mentionned is : !-- csrf = { pn : "csrt", pv : '18196769039293321355', vh : [ ], vu : [ /^\/(.\/).$/ ], f : 0, f_cancel_onload : 0 }; if (typeof is_ajsp_running == "undefined") { is_ajsp_running = false; } //--