diff --git a/maxkey-core/src/main/java/org/maxkey/web/WebXssRequestFilter.java b/maxkey-core/src/main/java/org/maxkey/web/WebXssRequestFilter.java
index c7748cfa5..4ed9dbd09 100644
--- a/maxkey-core/src/main/java/org/maxkey/web/WebXssRequestFilter.java
+++ b/maxkey-core/src/main/java/org/maxkey/web/WebXssRequestFilter.java
@@ -44,6 +44,10 @@ public class WebXssRequestFilter  extends GenericFilterBean {
 		skipUrlMap.put("/notices/update", "/notices/update");
 		skipUrlMap.put("/institutions/update","/institutions/update");
 		skipUrlMap.put("/localization/update","/localization/update");
+		skipUrlMap.put("/apps/updateExtendAttr","/apps/updateExtendAttr");
+		skipUrlMap.put("/synchronizers/add","/synchronizers/add");
+		skipUrlMap.put("/synchronizers/update","/synchronizers/update");
+		
 		//authz
 		skipUrlMap.put("/authz/cas", "/authz/cas");
 		skipUrlMap.put("/authz/cas/", "/authz/cas/");