chemistry-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Florian Müller <f...@apache.org>
Subject Re: CsrfManager csrfParameter
Date Sat, 27 Feb 2016 07:07:31 GMT
Hi Florent,

Check the class CmisBrowserBindingServlet, line 387.

- Florian


> Hi,
> 
> CsrfManager.check has an "isContentRequest" boolean parameter to
> determine whether to additionally check csrfParameter if the
> csrfHeader header is not set. However I'm seeing no caller where
> isContentRequest = true. Am I missing something?
> 
> Thanks,
> Florent

Mime
View raw message