usefulTips

Useful configuration tips

sas.commons.web.security

You can set these thru SASEnvironment Manager if you have admin priveleges.

1. CORS

   • allowCredentials Set this to true
   • Allowed Origins - set this to meet your needs.A * will leave this wide open to all clients. Talk to your site administrator.

2. cookies

   • sameSite Critical for browsers like Chrome. For VA-SDK you need to set this to None

3. CSRF

   • allowed URI A sample is shown below. Use your expertise in regex to specify the allowed uris.

        http(s?)[:]\/\/([^\.]+\.)*acme\.com,http(s)*[:]\/\/localhost([:])*\d*