We are getting the below error in Sitecore Forms on Production site.
We are using Sitecore 9.1.1 version with SXA.
I went through many articles/blogs but could not find anything relevant Please suggest.
-
Did you check this article related to the caching? madhuanbalagan.com/…– Sumit BhatiaJul 5, 2022 at 15:22
-
I have already checked this link and we are not using cache in our site.– NishaJul 5, 2022 at 15:31
-
Did you verify whether anti forgery token is generated by inspecting the form in browser Dev tools. If yes, is token is changing on every refresh? If token itself is not generated, then you have to check the Form.cshtml. @Html.AntiForgeryToken() line should be presented.– ThamizhJul 5, 2022 at 15:52
-
I have checked all the details and found that token is changing after refreshing the page. Is it possible to get this error after getting 500 error?– NishaJul 5, 2022 at 18:22
-
Are you getting 500 error. Did you check event viewer for further details?– ThamizhJul 8, 2022 at 6:06
Add a comment
|
2 Answers
The way Anti-Forgery works in Sitecore is the following:
- There should be
@Html.AntiForgeryToken()HTML helper in the form razor view - A validation should be made in the forms controller using the
[ValidateAntiForgeryToken]action filter
If you have these then an HTML code should be generated like below:
<input name="__RequestVerificationToken" type="hidden" value="xxxx">
Although the blog is about implementing forms in JSS, the concept could be understood from this link: Sitecore JSS Anti-forgery
If the web.config file has the correct settings for the AntiForgery token, then you should verify that the ValidateAntiForgeryToken attribute is present in the controller responsible for form submission. Additionally, you should ensure that @Html.AntiForgeryToken() is present in the form view.
