Disable ValidateAntiForgeryToken for DesignerPreviewController.Block

VirtoCommerce · Feb 12, 2020 · a5ab5a9 · a5ab5a9
1 parent b718191
commit a5ab5a9
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/VirtoCommerce.Storefront/Controllers/DesignerPreviewController.cs b/VirtoCommerce.Storefront/Controllers/DesignerPreviewController.cs
@@ -22,7 +22,8 @@ public IActionResult Index()
         }
 
         [HttpPost("designer-preview/block")]
-        [ValidateAntiForgeryToken]
+        //We can't use AntiForgery check here due to IFrame limitations. Browsers don't send cookies from IFrames.
+        //[ValidateAntiForgeryToken]
         public IActionResult Block([FromBody]dynamic data)
         {
             var page = new ContentPage