Adding CSRF header to internal post calls in Node-Red

We are trying to add CSRF custom header to the ui/socket.io calls and we are finding it to do it with traditional middleware process. Is there any other way we could do that?

You are aware that you can only add custom headers to the initial connection of ws?

Once it has upgraded the connection from http(s) for the initial handshake to ws(s), custom headers are no longer available.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.