Tomcat Check For Allowed Referrer
For additional protection, we recommend enabling Tomcat to check for allowed referrer:
- Edit $MM_HOME/tomcat/conf/web.xml
- Uncomment the two filter sections in the 'Checks referrer is allowed' section. The variable ${server.fqdn} will be substituted with the value of M_SERVER_FQDN in tomcat.properties
- Edit $MM_HOME/tomcat/conf/tomcat.properties by:
- Changing the M_SERVER_FQDN variable from localhost to <myMMServer.myDomain>