Start workflow through myfiles error?

[Patrícia Sousa]

0down votefavorite

I'm trying to put a file inside MyFiles and start a workflow in this file, but I obtain: 2016-05-06 09:02:54,719 INFO [site.servlet.CSRFFilter] [http-apr-8080-exec-12] Possible CSRF attack noted when comparing token in session and request header. Request: POST /share/page/context/mine/start-workflow May 06, 2016 9:02:54 AM org.apache.catalina.core.StandardWrapperValve invoke SEVERE: Servlet.service() for servlet [Spring Surf Dispatcher Servlet] in context with path [/share] threw exception [Possible CSRF attack noted when comparing token in session and request header. Request: POST /share/page/context/mine/start-workflow] with root cause javax.servlet.ServletException: Possible CSRF attack noted when comparing token in session and request header. Request: POST /share/page/context/mine/start-workflow This error. How can I solve this? Thanks!!

[Igor Blanco]

Read this blog post:

https://www.alfresco.com/blogs/ewinlof/2013/03/11/introducing-the-new-csrf-filter-in-alfresco-share/

After reading it you should understand the issue better and be able to configure your environment right to avoid the issue or at least be able to disable the filter.

Good luck.

--
You received this message because you are subscribed to the Google Groups "Alfresco Technical Discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to alfresco-technical-d...@googlegroups.com.
To post to this group, send email to alfresco-techn...@googlegroups.com.
Visit this group at https://groups.google.com/group/alfresco-technical-discussion.
For more options, visit https://groups.google.com/d/optout.

--

Igor Blanco González
Binovo IT Human Project
e-mail: ibl...@binovo.es
Telf. :   943493611
Dirección:
                         Astigarraga Bidea 2
                          Planta 6. - Ofi. 3-2 
                    20180 Oiartzun ( Gipuzkoa )

[Patrícia Sousa]

But I have to change the code of the standard workflow ? This only occurs occasionally. I use this filter for other situations but in this situation I don't know how can I adapt this

Patrícia Sousa

[Patrícia Sousa]

Thanks Igor! I already can do it! I disable the CSRF with code of this site. Thank you so much for the help :)