AEM dispatcher post method configurations | Community
Skip to main content
New Participant
Feb 15, 2021 11:25 AM UTC
Solved

AEM dispatcher post method configurations

Hi All,

I would like to refine the post method configuration on dispatcher filters. So ,the idea is to block all the post methods in my repository on adding the below condition.

//001 {/type "deny" /method "POST" /url "/content*"}

The above filter blocks the entire post methods present in my content content . So ,I need to allow only the required post methods present on my project.

//002 {type "allow" /method "POST" url "/content/[.]*.html"}

Adding on the above filter would be allowing the required post method with html selectors. So, whether the above //002 filter is sufficient to allow all the content paths with post servlet calls without any blockage

Kindly suggest on the above and your ideas on allowing the post calls

Thanks.

 

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
SureshDhulipudi
SureshDhulipudiAccepted solution
New Participant
Feb 15, 2021 12:29 PM UTC

yes, that should work.

Please see this

https://experienceleague.adobe.com/docs/experience-manager-dispatcher/using/configuring/dispatcher-configuration.html?lang=en#enabling-access-to-vanity-urls-vanity-urls

 

Example Filter: Enable POST Requests

The following example filter allows submitting form data by the POST method:

/filter {
    /0001  { /glob "*" /type "deny" }
    /0002 { /type "allow" /method "POST" /url "/content/[.]*.form.html" }
}

4 replies

SureshDhulipudi
SureshDhulipudiAccepted solution
New Participant
Feb 15, 2021 12:29 PM UTC

yes, that should work.

Please see this

https://experienceleague.adobe.com/docs/experience-manager-dispatcher/using/configuring/dispatcher-configuration.html?lang=en#enabling-access-to-vanity-urls-vanity-urls

 

Example Filter: Enable POST Requests

The following example filter allows submitting form data by the POST method:

/filter {
    /0001  { /glob "*" /type "deny" }
    /0002 { /type "allow" /method "POST" /url "/content/[.]*.form.html" }
}
Translate
Level 2
Feb 15, 2021 1:34 PM UTC

Thanks suresh .

But my question is it would not be blocking the post method servlet calls other than form data.

Translate
arunpatidar
New Participant
Feb 15, 2021 12:26 PM UTC

Hi,

you can create your servlet with some selectors and allow only those selector requests to avoid other open post request url as well from your project. Though I am not sure about your use case.

Translate
Arun Patidar