[opencms-dev] CSRF for custom search page.

Manoj.Sharma at nevagroup.com Manoj.Sharma at nevagroup.com
Fri Aug 14 07:32:29 CEST 2015


Hello Friends,
                            I have created a custom search page. where all 
the data searched and display. But there are two issues that i am facing, 
1) first is CSRF issue which found by the one of best STQC comp. in india. 
and 2) Second is pagination not working for anonymous users, but 
pagination start working  if i logined  as administrator.

To implement CSRF prevention i have develop two filter using 
https://dzone.com/articles/preventing-csrf-java-web-apps url. This url 
code working fine with normal code created for testing purpose, but when i 
configured these filter in opencms web.xml and place all java class files 
and libraries in their appropriate folder then opencms not working, it 
will start and then shotdown without any error log. But if i removed the 
filter configuration from web.xml then opencms start working.

Please Friends i really need help in this scenario.

With Regards
Manoj Kumar Sharma
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://webmail.opencms.org/pipermail/opencms-dev/attachments/20150814/304f830c/attachment.htm>


More information about the opencms-dev mailing list