How to implement XSRF Protection in Mobile approval tool ?

[bharanidharan]

Hi All,

The UWLonDevice mobile approval tool is affected by CSRF.

We need to know how to implement the same as it is just a java application that reads workitems from SBWP and shows only workitems in the app that matches a specific taskid.

Regards,

Bharanidharan S P M

[bharanidharan]

Hi All,

How the XSRF token will be generated and how to fetch and validate it ?

Regards,

Bharanidharan S P M

[bharanidharan]

Hi Santarshi,

Thanks for your response.

But here we are not using SAP Standard UWL and not being accessed using portal.

It is a CRM UWL mobile approval application.

Regards,

Bharanidharan S P M

[former_member189925]

Hi Bharanidharan

Regarding your query, to implement XSRF with uwl, Refer and implement the steps given under the resolution section of it

KBA # 1599882 - Mitigation of XSRF (Cross-Site Request Forgery) in UWL

Regards

Santarshi Samanta