nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Call a new Page as POST

jamilnour

Hello,

I added a new page to Share and this page has many parameters. Everything is working well and I can read the parameters from the new page widget as following:

 options : {
            nodeRef : page.url.args.nodeRef,
            pageNumber : page.url.args.pageNumber,
            webscriptAction : page.url.args.webscriptAction,
            certifyPluginParam : page.url.args.certifyPluginParam,
            siteId : (page.url.templateArgs.site != null) ? page.url.templateArgs.site : ""
        }
‍‍‍‍‍‍‍‍‍

I have a security concern about sending the page parameters as GET and asking if it is possible to call it as POST? if yes how I can read the page arguments?

Best regards
Jamil

Find more posts tagged with

Comments

muralidharand

Hi,

Can you please take a look at start-workflow page?
The start-workflow page is called by the POST method from the start-workflow option from the document library actions.
The start workflow page is not built on Aikau style, but you can some idea on how to use the parameters, etc..

jamilnour

Thank you for guiding me to find the sample

I applied it an it works

For anybody who wants to do the same I have to notice that you should add the page action to the list of POST requests that does NOT require a token. This can be done by adding the following to the share-config-custom.xml

            <rule>
                <request>
                    <method>POST</method>
                    <path>/page/dologin(\?.+)?|/page/site/[^/]+/plugin|/page/plugin|/page/context/[^/]+/plugin</path>
                </request>
                <action name="assertReferer">
                    <param name="referer">{referer}</param>
                </action>
                <action name="assertOrigin">
                    <param name="origin">{origin}</param>
                </action>
            </rule>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍

To add this rule you should:

1- Copy the entire CSRFPolicy config in share-security-config.xml
2- Paste it into your share-config-custom.xml file and make sure it is replacing the old config section:

<config evaluator="string-compare" condition="CSRFPolicy" replace="true">…‍

3- Add the rule above same as the start-workflow rule

Best regards
Jamil