When you work in the SAS Fraud Management user interface, you might receive the following warning:
Potential CSRF attack detected
There are a few, possible solutions to this problem.
- First, try closing and then re-opening your web browser session. (Make sure that you close the entire browser application, not just your session.)
- If closing and re-opening the browser does not resolve the problem, then attempt to clear your browser cookies and temporary files. (See your specific browser help for details).
- For SAS Fraud Management 4.1 or later, the software uses Apache Tomcat. In Tomcat, the useHttpOnly property is enabled by default, which might cause the problem to occur. You can disable the property either at a server level or in the web application.
- To disable the useHttpOnly at the server level, follow these steps:
- Open the context.xml file that resides in the $CATALINA_BASE/conf/ directory.
- In context.xml, search for the following line and set the useHttpOnly= option to a value of false.
<?xmlversion="1.0" encoding="UTF-8"?><context useHttpOnly="false" more-context-options>