I have a controller that adds on # and : i.e. localhost/site/controller#files:home
It works as expected with CSRF turned off. I want to turn it off for the whole controller. In my config I tried excluding it with
site/controller
site/controller/
site/controller[a-zA-Z0-9#:]
site/controller[a-zA-Z0-9#:/]
What am i missing?