topic 4.2.f Possible CSRF attack noted when asserting referer header in Alfresco Archive

4.2.f Possible CSRF attack noted when asserting referer header

rodrigorapozo — Mon, 06 Oct 2014 10:19:29 GMT

Hello everyone,I have a problem after put my alfresco behind apache httpd:<VirtualHost *:80> ProxyPass /share http://127.0.0.1:8181/share ProxyPassReverse /share http://127.0.0.1:8181/share</VirtualHost>Error: 2014-10-06 02:07:24,839 ERROR [alfresco.web.site] [http-bio-8181-

Re: 4.2.f Possible CSRF attack noted when asserting referer header

angelborroy — Mon, 06 Oct 2014 12:48:30 GMT

Have you tried to include http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxypreservehost directive?

You can also proxy using AJP protocol.

Re: 4.2.f Possible CSRF attack noted when asserting referer header

timharder — Wed, 13 Jul 2016 13:08:00 GMT

Hi,

AJP is not capable of dealing with heavy load. So if you have much traffic, try to go for a Filter instead.

Best,
Tim