#158 add configuration for CSRF protection

TheHive-Project · Mar 27, 2017 · be5129e · be5129e
1 parent dfd75f3
commit be5129e
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/thehive-backend/conf/reference.conf b/thehive-backend/conf/reference.conf
@@ -2,6 +2,11 @@
 # !!! This file must not be modified !!!
 # Custom configuration must be set in application.conf file.
 
+# name of cookie in which the CSRF token is transmitted to client
+play.filters.csrf.cookie.name = XSRF-TOKEN
+# name of header in which the client should send CSRD token
+play.filters.csrf.header.name = X-XSRF-TOKEN
+
 # handler for errors (transform exception to related http status code
 play.http.errorHandler = org.elastic4play.ErrorHandler