function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
Maverick26Maverick26 

I am able to preview VF page from Developer Console when the CSRF is unchecked. When the "Require CSRF protection on GET requests" is check I am not able to preview the VF page.. Can someone help me please?

Best Answer chosen by Maverick26
SwethaSwetha (Salesforce Developers) 
HI Sai Kiran,
Can you share the VF code?

Also recommend reviewing https://salesforce.stackexchange.com/questions/161301/critical-update-allow-csrf-protection-on-get-requests-to-visualforce-pages-c based on which,if the VF redirection logic is broken then look for places where you have used anchor tags and replace with one of the below formats 
<apex:outputLink value="/apex/PageName">Link using apex:outputlink</apex:outputlink>

<a href="{!$Page.PageName}">Link using $Page</a>

<a href="{!URLFOR($Page.PageName)}">Link using URLFOR()</a>
Similarly, ensure all redirection happen via pagereference methods like below 
public class customController {
  public PageReference getPage() {
    return new PageReference('/apex/PageName'); 
  }

 public PageReference getPage1() {
  return Page.PageName; 
 }
}

If this information helps, please mark the answer as best. Thank you

All Answers

SwethaSwetha (Salesforce Developers) 
HI Sai Kiran,
Can you share the VF code?

Also recommend reviewing https://salesforce.stackexchange.com/questions/161301/critical-update-allow-csrf-protection-on-get-requests-to-visualforce-pages-c based on which,if the VF redirection logic is broken then look for places where you have used anchor tags and replace with one of the below formats 
<apex:outputLink value="/apex/PageName">Link using apex:outputlink</apex:outputlink>

<a href="{!$Page.PageName}">Link using $Page</a>

<a href="{!URLFOR($Page.PageName)}">Link using URLFOR()</a>
Similarly, ensure all redirection happen via pagereference methods like below 
public class customController {
  public PageReference getPage() {
    return new PageReference('/apex/PageName'); 
  }

 public PageReference getPage1() {
  return Page.PageName; 
 }
}

If this information helps, please mark the answer as best. Thank you
This was selected as the best answer
Maverick26Maverick26

Hi Swetha

Thanks for the reply, here I'm trying to the VP page which has CSRF token enabled and it in "Login Flow". This is the issue if it is a vf page 
page reference would have been enough. But, it's a login flow.

Can you please help me with any of the approaches?

Thanks in advance.