diff --git a/src/Umbraco.Web.UI.Client/src/common/security/securityinterceptor.js b/src/Umbraco.Web.UI.Client/src/common/security/securityinterceptor.js
index 024e8d5a43..6596ad759f 100644
--- a/src/Umbraco.Web.UI.Client/src/common/security/securityinterceptor.js
+++ b/src/Umbraco.Web.UI.Client/src/common/security/securityinterceptor.js
@@ -103,5 +103,7 @@ angular.module('umbraco.security.interceptor')
// We have to add the interceptor to the queue as a string because the interceptor depends upon service instances that are not available in the config block.
.config(['$httpProvider', function ($httpProvider) {
+ $httpProvider.defaults.xsrfHeaderName = 'X-UMB-XSRF-TOKEN';
+ $httpProvider.defaults.xsrfCookieName = 'UMB-XSRF-TOKEN';
$httpProvider.responseInterceptors.push('securityInterceptor');
}]);
diff --git a/src/Umbraco.Web.UI.Client/src/init.js b/src/Umbraco.Web.UI.Client/src/init.js
index 016c33015d..62156a8455 100644
--- a/src/Umbraco.Web.UI.Client/src/init.js
+++ b/src/Umbraco.Web.UI.Client/src/init.js
@@ -7,7 +7,7 @@ app.run(['userService', '$log', '$rootScope', '$location', 'navigationService',
// it cannot be static
$.ajaxSetup({
beforeSend: function (xhr) {
- xhr.setRequestHeader("X-XSRF-TOKEN", $cookies["XSRF-TOKEN"]);
+ xhr.setRequestHeader("X-UMB-XSRF-TOKEN", $cookies["UMB-XSRF-TOKEN"]);
}
});
diff --git a/src/Umbraco.Web.UI/umbraco_client/Application/Extensions.js b/src/Umbraco.Web.UI/umbraco_client/Application/Extensions.js
index 63870fad08..de12c6194f 100644
--- a/src/Umbraco.Web.UI/umbraco_client/Application/Extensions.js
+++ b/src/Umbraco.Web.UI/umbraco_client/Application/Extensions.js
@@ -369,7 +369,7 @@
if (parts.length === 2) return parts.pop().split(";").shift();
}
- xhr.setRequestHeader("X-XSRF-TOKEN", getCookie("XSRF-TOKEN"));
+ xhr.setRequestHeader("X-UMB-XSRF-TOKEN", getCookie("UMB-XSRF-TOKEN"));
}
});
diff --git a/src/Umbraco.Web/WebApi/Filters/AngularAntiForgeryHelper.cs b/src/Umbraco.Web/WebApi/Filters/AngularAntiForgeryHelper.cs
index b83b4114a3..dfeeee536d 100644
--- a/src/Umbraco.Web/WebApi/Filters/AngularAntiForgeryHelper.cs
+++ b/src/Umbraco.Web/WebApi/Filters/AngularAntiForgeryHelper.cs
@@ -16,17 +16,17 @@ namespace Umbraco.Web.WebApi.Filters
///
/// The cookie name that is used to store the validation value
///
- public const string CsrfValidationCookieName = "XSRF-V";
+ public const string CsrfValidationCookieName = "UMB-XSRF-V";
///
- /// The cookie name that is set for angular to use to pass in to the header value for "X-XSRF-TOKEN"
+ /// The cookie name that is set for angular to use to pass in to the header value for "X-UMB-XSRF-TOKEN"
///
- public const string AngularCookieName = "XSRF-TOKEN";
+ public const string AngularCookieName = "UMB-XSRF-TOKEN";
///
/// The header name that angular uses to pass in the token to validate the cookie
///
- public const string AngularHeadername = "X-XSRF-TOKEN";
+ public const string AngularHeadername = "X-UMB-XSRF-TOKEN";
///
/// Returns 2 tokens - one for the cookie value and one that angular should set as the header value