Return-Path: X-Original-To: apmail-chemistry-dev-archive@www.apache.org Delivered-To: apmail-chemistry-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id A963A18127 for ; Thu, 25 Feb 2016 15:44:04 +0000 (UTC) Received: (qmail 81852 invoked by uid 500); 25 Feb 2016 15:44:04 -0000 Delivered-To: apmail-chemistry-dev-archive@chemistry.apache.org Received: (qmail 81766 invoked by uid 500); 25 Feb 2016 15:44:04 -0000 Mailing-List: contact dev-help@chemistry.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@chemistry.apache.org Delivered-To: mailing list dev@chemistry.apache.org Received: (qmail 81754 invoked by uid 99); 25 Feb 2016 15:44:03 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 25 Feb 2016 15:44:03 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 2296A1804A8 for ; Thu, 25 Feb 2016 15:44:03 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -0.721 X-Spam-Level: X-Spam-Status: No, score=-0.721 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=nuxeo-com.20150623.gappssmtp.com Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id Xuts1ce6XKLl for ; Thu, 25 Feb 2016 15:44:01 +0000 (UTC) Received: from mail-lf0-f43.google.com (mail-lf0-f43.google.com [209.85.215.43]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id 651AC5F39D for ; Thu, 25 Feb 2016 15:44:01 +0000 (UTC) Received: by mail-lf0-f43.google.com with SMTP id 78so35584109lfy.3 for ; Thu, 25 Feb 2016 07:44:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nuxeo-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to:content-type; bh=yyxS3dH7XRDi2j6ctmeT05DvWUS2jSQYQDS9+pj/DWQ=; b=w65bZFA6NDj+adWQSmuQU01g/ueqMTZ4U+CezDHFeGiLV5sx1iQGncWdwFulVRBKtI 4E0VVYsWeRbbrJX/oUzpO3VZdSzearHTiTa14duZeQE5kHkTv+BsEdo7zp9laV7G4eG7 E7ftId2G2+OXDXVXZ4n/Yh7gqNrI80TazQwxzvCYoYwtIfJuVzyb3ithrhOBbJzi2uVj BPlrmh6lnL/wKQmpKY1Q7Zw0OY+aa8H3jltlion1hXXh2K8x1+T+6xrUD3VWe3LVengm P/5UToKs7lKBtE7CLAZqmuWYdhaOBpmmeCBBSvLrJ7zx7qa0SnqTo2coZscMgbvvQlNR E0eg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to :content-type; bh=yyxS3dH7XRDi2j6ctmeT05DvWUS2jSQYQDS9+pj/DWQ=; b=mPUy6KgNmDeOrAeCxVVYEEsWabDRds+IzggZjq8HdxrI6r0e+8CDdk8vGdTPXXdq/Y hzKMSeILOGILX+kLDC4OKHfq8xnhEfgH4VF01fXqf8D2gwZWgNRHY1rTDlnalAoraaLN V0oy3bgOOB2F6SbN58Lgi+vZWftoXC3vw7YdwxJ91RwJfyDLMscf+pvOtlcw0d5FY4bn vLk0PkNLwIl7Ok1qU2Jf5C1JfclXEPvTXQTPGzDgCOxSwgP4Zkg6xP2+/vCROJ7zDS34 88bI9MWWxvUQxlr48+b41aVqH872jN5as2FW4LwZuWEMNTObeUOdbtld+qBg7W84NLmY hXVQ== X-Gm-Message-State: AG10YOTPpyQtjJ9XTK+icAog1Mz0K29Cm28Z84/LDpUPAHWOXmBjCdbvYBwbMdXJrSU4kOvqA9KUeHnc3erdGQ== X-Received: by 10.25.43.20 with SMTP id r20mr17140453lfr.30.1456415039906; Thu, 25 Feb 2016 07:43:59 -0800 (PST) MIME-Version: 1.0 Received: by 10.112.151.36 with HTTP; Thu, 25 Feb 2016 07:43:40 -0800 (PST) From: Florent Guillaume Date: Thu, 25 Feb 2016 16:43:40 +0100 Message-ID: Subject: CsrfManager csrfParameter To: dev@chemistry.apache.org Content-Type: text/plain; charset=UTF-8 Hi, CsrfManager.check has an "isContentRequest" boolean parameter to determine whether to additionally check csrfParameter if the csrfHeader header is not set. However I'm seeing no caller where isContentRequest = true. Am I missing something? Thanks, Florent -- Florent Guillaume, Director of R&D, Nuxeo Open Source, Java EE based, Enterprise Content Management (ECM) http://www.nuxeo.com http://www.nuxeo.org +33 1 40 33 79 87