Forum Discussion
CEXtakkaya
10 years agoNew Contributor
I started my recordings with a login, so I'm not sure why I still get this forbidden status code.
Thanks
WesleyG
10 years agoOccasional Contributor
I did some more research on CSRF and it seems like there is some kind of token that you need to retrieve from one of the responses, then relay that token in the requests.
What you can do is record your test a few times, and look at which parameter in the requests is different (that will be your token). Then you can use Data Selectors and Data Replacers to get the token and put it where it needs to be.