I just downloaded Alfresco and I’m trying a few things on my own. After so much reading I managed to hide the 8080 URL from the site using Apache as a proxy server for Tomcat.
Today I faced an issue: I am able to see the login page, but I cant pass through the login page.
After seeing the log file I came to know the CSRF filter is causing the issue. I just went to my configuration page and I removed the CSRF filter and it is working.
Is the CSRF filter required for an intranet site?
Is it possible that someone from the internet can perform a XSRF attack on my application?