Getting CSRF (Cross site request forgery) error when running with Tomcat 8 Service (Windows)
Everything works correctly when I start Joget with the supplied scripts but after installing the Tomcat8 service I get the following error when I try to log in;
*****************************************************
* Owasp.CsrfGuard Properties
*
* Logger: org.joget.commons.util.CsrfGuardLogger
* NewTokenLandingPage: null
* PRNG: SHA1PRNG
* SessionKey: OWASP_CSRFTOKEN
* TokenLength: 32
* TokenName: OWASP_CSRFTOKEN
* Ajax: true
* Rotate: false
* Javascript cache control: null
* Javascript domain strict: false
* Javascript inject attributes: false
* Javascript inject forms: false
* Javascript referer pattern: null
* Javascript referer match domain: false
* Javascript source file: null
* Javascript X requested with: null
* Protected methods: Empty HashSet
* Protected pages size: 0
* Unprotected methods: HashSet size: 1: [0]: GET
* Unprotected pages size: 3
* TokenPerPage: false
* Enabled: true
* ValidateWhenNoSessionExists: true
* Action: org.owasp.csrfguard.action.Log
* Parameter: Message = potential cross-site request forgery (CSRF) attack thwarted (user:%user%, ip:%remote_ip%, method:%request_method%, uri:%request_uri%, error:%exception_message%)
* Action: org.owasp.csrfguard.action.Error
* Parameter: Message = Security Violation.
* Parameter: Code = 403
* Action: org.owasp.csrfguard.action.Rotate
*****************************************************
Any recommendations on how to resolve this?
Thanks in advance,
ps