Balena public device url CSRF

Product support
1

Hey everyone,

I’m using a Sveltekit app which is served behind a nginx reverse-proxy, this reverse proxy can be accessed with the balena public URL.

On the device i serve this proxy on a webkit frontend so there is no issues in this way, but when using the balena remote url, i have some CSRF issues with form actions.

Is there any piece of information about the Balena remote url that could help me ?
Im looking for headers specifications for example or how is routed trafic from the url to the machine?

thank you

1 Like
2

Hello @kworz

I have a first question. For you balena remote url means balena public URL?

The traffic is routed through a VPN proxy that we use called Cloudlink. You can read some more information in our docs here.

Could you please share what exactly would you need to use on the top of the balena public device URL?