Previous Topic: Improved Message on Program ExitNext Topic: r12.5 SP12

Release Notes › New Features › r12.5 SP13 › Protection from CSRF Attacks

Protection from CSRF Attacks

CA Identity Manager is enhanced to improve the resistance to Cross-Site Request Forgery (CSRF) attacks. By default, the enhancement is disabled in CA Identity Manager.

To enable the enhancement:

  1. Open the web.xml file located in the following location: 
    application-server/iam_im.ear/user_console.war/WEB-INF
  2. Find the <context-param> element with <param-name> csrf-prevention-on.
  3. Set the <param-value> to true.
  4. Restart the application server.