title: configuring AEM dispatcher 6.2 CSRF filters
body: <p>I am trying to follow the instruction on the adobe checklist, but there are no examples on how to configure this filter or test that it works. Looking for any insight and example of how this should work on the dispatcher.</p>
  
  <p><a href="https://docs.adobe.com/docs/en/dispatcher/security-checklist.html#Configure%20Dispatcher%20to%20prevent%20CSRF%20Attacks" rel="nofollow noreferrer">The dispatcher checklist</a></p>
  
  <pre><code> /0084
      {
      /type "allow"
      /path "/libs/granite/csrf/token.json"
      /extension '(json)'
      }
  </code></pre>
  
  <p>I assume this is correct but I have no way of verifying. also no idea how I can create a filter for: </p>
  
  <blockquote>
    <p>Creating a filter to allow the CSRF-Token header</p>
  </blockquote>
  
  <p>Appreciate your help in advance</p>