ADC

Managing CSRF form tagging check relaxations

August 20, 2024

Contributed by:

C C S

You configure an exception (or relaxation) to the CSRF Form Tagging security check in the Add Cross-Site Request Forgery Tagging Check Relaxation dialog box or the Modify Cross-Site Request Forgery Tagging Check Relaxation dialog box.

To configure a CSRF form tagging check relaxation by using the GUI

Navigate to Security > Citrix Web App Firewall > Profiles.
In the Profiles pane, select the profile you want to configure, and then click Open.
In the Configure Web App Firewall Profile dialog box, click the Security Checks tab. The Security Checks tab contains the list of Web App Firewall security checks.
To add or modify a CSRF relaxation, do one of the following:
- To add a new relaxation, click Add.
- To modify an existing relaxation, select the relaxation that you want to modify, and then click Open.
The Add Cross-Site Request Forgery Tagging Check Relaxation or Modify Cross-Site Request Forgery Tagging Check Relaxation dialog box is displayed. Except for the title, these dialog boxes are identical.
Fill in the dialog box as described below.
- Enabled check box—Select to place this relaxation or rule in active use; clear to deactivate it.
- Form Origin URL—In the text area, enter a PCRE-format regular expression that defines the URL that hosts the form.
- Form Action URL—In the text area, enter a PCRE-format regular expression that defines the URL to which data entered into the form is delivered.
- Comments—In the text area, type a comment. Optional.
Note: For any element that requires a regular expression, you can type the regular expression, use the Regex Tokens menu to insert regular expression elements and symbols directly into the text box, or click Regex Editor to open the Add Regular Expression dialog box, and use it to construct the expression.
Click OK. The Add Cross-Site Request Forgery Tagging Check Relaxation or Modify Cross-Site Request Forgery Tagging Check Relaxation dialog box closes and you return to the Modify Cross-Site Request Forgery Tagging Check dialog box.
To remove a relaxation or rule, select it, and then click Remove.
To enable a relaxation or rule, select it, and then click Enable.
To disable a relaxation or rule, select it, and then click Disable.
To configure the settings and relationships of all existing relaxations in an integrated interactive graphic display, click Visualizer, and use the display tools.
To review and configure learned rules for the CSRF check, click Learningand perform the steps in “To configure and use the Learning feature.”
Click OK.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Managing CSRF form tagging check relaxations

August 20, 2024

Contributed by:

C C S

August 20, 2024

Contributed by:

C C S

Managing CSRF form tagging check relaxations

To configure a CSRF form tagging check relaxation by using the GUI

In this article