From 955c8e6fcff75bd0552f25c8d3e51bcd648fd947 Mon Sep 17 00:00:00 2001
From: Florent Gravin <florent.gravin@camptocamp.com>
Date: Thu, 14 Dec 2023 15:55:14 +0100
Subject: [PATCH] Set XSRF cookie path to /

---
 .../main/webapp/WEB-INF/config-security/config-security-core.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/src/main/webapp/WEB-INF/config-security/config-security-core.xml b/web/src/main/webapp/WEB-INF/config-security/config-security-core.xml
index edecb348dae..da44b7b3900 100644
--- a/web/src/main/webapp/WEB-INF/config-security/config-security-core.xml
+++ b/web/src/main/webapp/WEB-INF/config-security/config-security-core.xml
@@ -362,6 +362,7 @@
   <bean class="org.fao.geonet.security.web.csrf.CookieCsrfTokenRepository"
         id="csrfTokenRepository">
     <property name="cookieHttpOnly" value="false"/>
+    <property name="cookiePath" value="/"/>
   </bean>
 
   <!-- RequestMatcher to exclude CSRF token from CSW requests -->