Post method with html extensions

Question

Hi All,I need to block my post configuration on aem dispatcher first and allow only required selectors with extensions on the dispatcher filters.So, could you please suggest on the way or whether the below filter will allow the post method with html extensions for configuring into the dispatcher. //001 { /type "allow" /method "POST" /url "/content/[.]*.html}Thanks in advance.

Sanket_Kumbharkhane · Accepted Answer

Hi @keerthi97 ,

if you use the below 1st rule in your filters. any file

/0001 { /type "deny" /url "*" }

It will deny everything for you including Get and Post [comes as the best practices]

and after that, you can allow POST requests.

Here are few examples to allow the post method with html & json extension

## allow POSTs to form selectors under content

/0002 { /type "allow" /method "POST" /url "/content/[.]*.form.html" }

## allow POSTs to update the shopping cart

/0003 { /type "allow" /method "POST" /path "/content/[.]*.commerce.cart.json" }

/filter {
   /0001 { /type "deny"  /url "*" }
   /0002 { /type "allow" /method "POST" /url "/content/[.]*.form.html" } 
   /0003 { /type "allow" /method "POST" /path "/content/[.]*.commerce.cart.json" } 
}

Sriga311 · Answer

Hi @sanket_kumbharkhane ,In my scenario, I am having post servlet calls modified in the form of resource types instead of /bin/, so could you please suggest some filters to refine and allow the POST servlets present in my project. Also , there are no identical selectors used in forms present in my application. Thanks for your help

Sign up

Login with SSO

Login to the community

Login with SSO