Jasper Error - cross-site request forgery (CSRF)

[kumu]

I have a fresh setup, clarity 14.3 and Jasper 5.1 (5.1.0.2 patch), where Jasper reports are not even loading when click on it. Getting below error in Jasper logs. I have multicaste set and its single server app. Please advise. Thanks.

 

ERROR CsrfGuard,http-bio-8089-exec-10:44 - potential cross-site request forgery (CSRF) attack thwarted (user:<anonymous>, ip:xx.xx.xx.xx, uri:/reportservice/flow.html, error:required token is missing from the request)

[Suman Pramanik]

The problem could be you are accessing CA PPM using the IP address instead of fully qualified domain name, try using the FQDN and also set the reporting URL to FQDN and test.

[kumu]

Thanks for the response Suman. I tried both IP and DNS the error continues.

 

Also the main issue I am trying to fix and I guess may be related.. When I click on any report for the first time since install it tries to load the report and then say unable to resolve DNS. It works in new tab though.

 

Wondering whats wrong, if its working in new tab should work when click on report 1st time.

[Suman Pramanik]

It could be a DNS issue also, glad it is resolved in new lab

[kumu]

Thanks. It turned to be DNS side issue. Got the latest dns did reset the URLs in property file and its working.

 

Thanks for your help..!!

[Kirubakaran.Devaprasad]

Hi All,

 

Looks like i am running into same issue. can anyone please suggest on how to reset the DNS URL's ?

Kind Regards,

Kiru

[Thiago Pimenta]

I was having the same problem, the problem was solved changing the parameters of nsa> Properties> Application> HTTP Entry URL and HTTPS entry url with valid parameters, being the name of the machine where the CA PPM is installed or the ip, depending on the purpose. For production environments make sure the url is valid in the company's dns server. The problem was solved