We are getting the below error in Sitecore Forms on Production site.
We are using Sitecore 9.1.1 version with SXA.
I went through many articles/blogs but could not find anything relevant Please suggest.
-
Did you check this article related to the caching? madhuanbalagan.com/…– Sumit BhatiaCommented Jul 5, 2022 at 15:22
-
I have already checked this link and we are not using cache in our site.– NishaCommented Jul 5, 2022 at 15:31
-
Did you verify whether anti forgery token is generated by inspecting the form in browser Dev tools. If yes, is token is changing on every refresh? If token itself is not generated, then you have to check the Form.cshtml. @Html.AntiForgeryToken() line should be presented.– ThamizhCommented Jul 5, 2022 at 15:52
-
I have checked all the details and found that token is changing after refreshing the page. Is it possible to get this error after getting 500 error?– NishaCommented Jul 5, 2022 at 18:22
-
Are you getting 500 error. Did you check event viewer for further details?– ThamizhCommented Jul 8, 2022 at 6:06
Add a comment
|
3 Answers
If the web.config file has the correct settings for the AntiForgery token, then you should verify that the ValidateAntiForgeryToken attribute is present in the controller responsible for form submission. Additionally, you should ensure that @Html.AntiForgeryToken() is present in the form view.
answered Apr 2, 2023 at 7:26
I have disabled the field caching section for rendering items associated with the page. Despite this, I encountered the same issue. Upon further investigation, I discovered that disabling the following three fields resolved the issue:
- Cacheable [shared]
- Clear on Index Update [shared]
- Vary By Data [shared]
The way Anti-Forgery works in Sitecore is the following:
- There should be
@Html.AntiForgeryToken()HTML helper in the form razor view - A validation should be made in the forms controller using the
[ValidateAntiForgeryToken]action filter
If you have these then an HTML code should be generated like below:
<input name="__RequestVerificationToken" type="hidden" value="xxxx">
Although the blog is about implementing forms in JSS, the concept could be understood from this link: Sitecore JSS Anti-forgery