I am doing correlation in Jmeter. I am facing below issue to find the Regular expression

Question

<input type="hidden" name="_csrf"
                    value="40ea7f46-799b-4ca0-b8cd-4adfba082aed" />

Above is the token I am getting in the request output. I am unable to replace this with a regular expression in Regular Expression Extractor of Jmeter.

<input type="hidden" name="_csrf" value="(.+?)" /> is not working.

Please help.

Answer 1

If your input actually contains a newline character, then you need to account for that in your regex. Furthermore, better be explicit about the valid characters in your regex, .+ is rarely a good thing:

<input type="hidden"\s+name="_csrf"\s+value="([^"]+)"\s*/>

Answer 2

you have to be careful with the spaces/newlines.

try with following simple regex:

value="(.*?)"\s/>

If it matches more than one element, to add uniquness, you can add name attribute in the regex as follows:

name="_csrf"\s+value="(.*?)"\s/>

Answer 3

This is another evidence for not using regular expressions to parse HTML as they are very fragile and sensitive to minimal markup changes. The more robust and resilient solution is using CSS/JQuery Extractor or XPath Extractor instead.

• The relevant CSS Expression is input[name=_csrf], use value as "attribute"
• The XPath query to get the value is //input[@name='_csrf']/@value

See How to Load Test CSRF-Protected Web Sites guide for detailed information on bypassing XSRF protection in JMeter tests