CSRF Protection in kibana 7.10.2

Report tools report that dashboard URLs don't have csrf protection. When looked at the request and response, don't see a csrf token in the get/post request.

Please help me to enable CSRF in Kibana UI so that the requests to Elastic Search URLs include a CSRF token.

1 Like

Hello @ravi_yadav2,

Could you please clarify which requests specifically don't have CSRF token? A screenshot from dev tools would be great.

I am serving login page by spring boot and passing CSRF Token to Kibana. do Kibana supports CSRF token?

If Yes then how i pass CSRF token to it.

Attaching screenshot from DevTool.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.