[NIFI-8510] CSRF filter blocking requests that contain unrelated cookies

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.14.0
• Fix Version/s: 1.14.0
• Component/s: Security
• Assignee: Nathan Gough
• Reporter: Nathan Gough
• Created: 03/May/21 15:47
• Updated: 03/May/21 18:31
• Resolved: 03/May/21 18:31

Description

The CSRF filter added in NIFI-7870 is blocking requests if ANY cookie is present in a request to NiFi and the NiFI CSRF cookie is not present. This caused a 403 for requests over http on localhost.

Issue Links

• is caused by: NIFI-7870 Fix anonymous access control for advanced UI resources
• links to: GitHub Pull Request #5050