Forum Discussion
Walter_Kacynski
Cirrostratus
CirrostratusUsing ASM and CSRF with Angular
Does any one have experience using ASM CSRF with the Angular framework? I see the in normal responses for HTML that the CSRT URL parameter is appended to for subsequent requests. However, our Angul...
Walter, ASM CSRF protection doesn't have support for Angular. But AFAIK you can implement the CSRF protection by yourself via iRule. For example you can use hash value of the TS_Cookie as the CSRF token, give it to angular by setting the value of CSRF_TOKEN cookie and enforce the protection by verifying that the CSRF_Token HTTP Header sent by Angular does match the value of MD5 hash of the TS_Cookie. Does it makes sense?