The CSRF Protection Framework the-csrf-protection-framework

In addition to the Apache Sling Referrer Filter, Adobe also provides a new CSRF Protection Framework to protect against this type of attack.

The framework makes use of tokens to guarantee that the client request is legitimate. The tokens are generated when the form is sent to the client and validated when the form is sent back to the server.

Requirements requirements

Dependencies dependencies

Any component that relies on the granite.jquery dependency can benefit from the CSRF Protection Framework automatically. If not, for any of your components, you must declare a dependency to granite.csrf.standalone before you can use the framework.

Replicating the Crypto Key replicating-crypto-keys

To use the tokens, you need to replicate the HMAC binary to all the instances in your deployment. See Replicating the HMAC key for more details.