Jump to content
We've recently updated our Privacy Statement, available here ×

potential cross-site request forgery (CSRF) attack thwarted


Recommended Posts

Hi Team, I have a installation in REDHAT 7 with Jaspersoft 6.4.2 and I am gettiung this error:

 

***************************************************** 

* Owasp.CsrfGuard Properties 

* Logger: com.jaspersoft.jasperserver.api.security.JSCsrfLogger 

* NewTokenLandingPage: null 

* PRNG: SHA1PRNG 

* SessionKey: OWASP_CSRFTOKEN 

* TokenLength: 32 

* TokenName: OWASP_CSRFTOKEN 

* Ajax: true 

* Rotate: false 

* Javascript cache control: null 

* Javascript domain strict: false 

* Javascript inject attributes: false 

* Javascript inject forms: false 

* Javascript referer pattern: null 

* Javascript referer match domain: false 

* Javascript source file: null 

* Javascript X requested with: null 

* Protected methods: HashSet size: 3: [0]: DELETE 

[1]: POST 

[2]: PUT 

 

* Protected pages size: 0 

* Unprotected methods: Empty HashSet 

* Unprotected pages size: 0 

* TokenPerPage: false 

* Enabled: true 

* ValidateWhenNoSessionExists: false 

* Action: org.owasp.csrfguard.action.Log 

* Parameter: Message = potential cross-site request forgery (CSRF) attack thwarted (user:%user%, ip:%remote_ip%, method:%request_method%, uri:%request_uri%, error:%exception_message%) 

* Action: org.owasp.csrfguard.action.Redirect 

* Parameter: Page = /reportservice/login.html 

* Action: org.owasp.csrfguard.action.Rotate 

 

how can I get this error to stop? I really appreciate the help

 

 

 

Link to comment
Share on other sites

  • Replies 0
  • Created
  • Last Reply

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×
×
  • Create New...