Mailing-List: contact user-help@jmeter.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "JMeter Users List" <user@jmeter.apache.org>
Received-SPF: pass (athena.apache.org: domain of madhuvchandana@gmail.com
 designates 209.85.219.54 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAAuw+CnTfnyCEgsv4-GAS=s1dUTAOpfS9vfizAL7SRYguVAkbQ@mail.gmail.com>
References: 
 <CAAuw+CmqXJ2RsihiGTwKh=pp7MCYBZ7=bAEwhMovpirPbO+etg@mail.gmail.com>
	<CAKUhUpptyQLALK4_Y7BgX9-iAmEOh0qi-2oq6PDnDdMYhoaSMg@mail.gmail.com>
	<CAAuw+Ck8tVUZygH+VW0YDcmRuj8Pr=pw7z79q3BhSL03pjkT=w@mail.gmail.com>
	<CAKUhUpphfUh3Zydqug=PEM4J0BySE-MRBNz8qy0QV-uLYi5U+g@mail.gmail.com>
	<CAAuw+CnTfnyCEgsv4-GAS=s1dUTAOpfS9vfizAL7SRYguVAkbQ@mail.gmail.com>
Date: Thu, 20 Jun 2013 00:05:55 +0530
Message-ID: 
 <CAKUhUpo=sy+_Mu2CbWtzMnZxZ9_d-y0ktchax=zufB=CKQ64vg@mail.gmail.com>
Subject: Re: CSRF
From: Madhu Sekhar <madhuvchandana@gmail.com>
To: JMeter Users List <user@jmeter.apache.org>
Content-Type: multipart/alternative; boundary=089e0115f6c69e82ce04df8619f3

--089e0115f6c69e82ce04df8619f3
Content-Type: text/plain; charset=ISO-8859-1

Is it from regex or any other matters?

On Thursday, June 20, 2013, nmq <nmq0607@gmail.com> wrote:
> I figured it out. Took a lot of googling and reading blogs, but I got it
to
> work.
> Thanks for your help
>
>
> On Wed, Jun 19, 2013 at 11:22 AM, Madhu Sekhar <madhuvchandana@gmail.com
>wrote:
>
>> Then Did you Write a RegEx to Correlate in the script? if not Please do
it.
>>
>> Thanks,
>> Madhu
>>
>>
>>
>> On Wed, Jun 19, 2013 at 8:49 PM, nmq <nmq0607@gmail.com> wrote:
>>
>> > Yes, it changes.
>> >
>> >
>> > On Wed, Jun 19, 2013 at 11:02 AM, Madhu Sekhar <
madhuvchandana@gmail.com
>> > >wrote:
>> >
>> > > Does the below value in the script change for every session/login?
>> > >
>> > > 'f3e8822f-3b26-
>> > > 48fd-b1ff-6c80742fe28f
>> > >
>> > > Thanks,
>> > > Madhu
>> > >
>> > >
>> > > On Wed, Jun 19, 2013 at 8:22 PM, nmq <nmq0607@gmail.com> wrote:
>> > >
>> > > > Hi All
>> > > >
>> > > > I've run into an issue. Our development team made some changes
>> > yesterday
>> > > > and today I'm getting an error "Error 401--Unauthorized" response
for
>> > an
>> > > > HTTP request.
>> > > >
>> > > > I examined the responses in Fiddler and I noticed this in the head
>> tag.
>> > > >
>> > > > <script type="text/javascript">
>> > > > $.setCSRFNonce('f3e8822f-3b26-48fd-b1ff-6c80742fe28f');
>> > > > </script>
>> > > >
>> > > >  I did some research on what CSRF is and found all kind of info on
>> > > Django.
>> > > > Also found a blog saying cookie manager should be able to handle
this
>> > > > authentication, by combining two elements.... by setting the
>> > save.cookie
>> > > > property in jmeter to true and to reference the CSRF token in an
HTTP
>> > > > request.
>> > > >
>> > > > I've tried this solution and it doesn't seem to work. I'm still
>> getting
>> > > the
>> > > > error.
>> > > >
>> > > > I've also been reading django documentation and trying to make
sense
>> of
>> > > it
>> > > > all. I would appreciate it if someone can help out and explain in
>> > simple
>> > > > terms (I'm not a programmer) exactly how do I go about solving this
>> > > issue.
>> > > >
>> > > > Any guidance would be highly appreciated.
>> > > >
>> > > > Thank you
>> > > > Sam
>> > > >
>> > >
>> > >
>> > >
>> > > --
>> > > madhu kk
>> > >
>> >
>>
>>
>>
>> --
>> madhu kk
>>
>

-- 
madhu kk

--089e0115f6c69e82ce04df8619f3--