Set XSRF cookie path to /

geoadmin · Dec 14, 2023 · 955c8e6 · 955c8e6
1 parent 8342a20
commit 955c8e6
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/web/src/main/webapp/WEB-INF/config-security/config-security-core.xml b/web/src/main/webapp/WEB-INF/config-security/config-security-core.xml
@@ -362,6 +362,7 @@
   <bean class="org.fao.geonet.security.web.csrf.CookieCsrfTokenRepository"
         id="csrfTokenRepository">
     <property name="cookieHttpOnly" value="false"/>
+    <property name="cookiePath" value="/"/>
   </bean>
 
   <!-- RequestMatcher to exclude CSRF token from CSW requests -->