Thank you. I've read this article several times. >Now according to CSRF: >You need to modify conf/jee-container.xml and add following property ><property name="secure" value="true" /> >To <!-- Tomcat without SSL enabled --> block right before <property name="connectionProperties"> >This should fix your issue
jee-container.xml <-- This file is not available in OM6.
