Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Victor Talukdar (VTALUKDAR)
ING Bank N.V.
PEGA Solution Architect and IT Chapter Lead
ING Bank N.V.
NL
VTALUKDAR Member since 2010 41 posts
ING Bank N.V.
Posted: Jul 4, 2019
Last activity: Jul 29, 2019
Posted: 4 Jul 2019 8:45 EDT
Last activity: 29 Jul 2019 1:36 EDT
Closed
Solved

Implement a Cross Site Scripting Filter

Hi,

I am currently using PEGA 7.3 environment. One of the APIs I am currently integrating to, is returning an error like this :

WARN n.i.r.p.r.f.DoubleSubmitCSRFFilter CSRF security arbiter: not proceeding, returning HttpStatus 'Forbidden'

The API team in question is asking me to implement a cross site scripting filter so that this barrier can be overtaken. Can you give me any suggestions on what are the possible approaches to do this ?

I am using a JSON-based API with POST method for integration purposes.

***Edited by Moderator: Lochan to update platform capability tags***

To see attachments, please log in.
Data Integration
Security

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice