DWR CSRF Security Error

最新推荐文章于 2019-08-26 15:47:47 发布

原创最新推荐文章于 2019-08-26 15:47:47 发布 · 231 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#web.xml #java

dwr 专栏收录该内容

1 篇文章

订阅专栏

 ERROR org.directwebremoting.dwrp.BaseCallMarshaller - A request has been denied as a potential CSRF attack.
修改web.xml文件
<servlet>
    <servlet-name>dwr-invoker</servlet-name>
    <servlet-class>org.directwebremoting.servlet.DwrServlet</servlet-class>
    <init-param>
      <param-name>debug</param-name>
      <param-value>true</param-value>
    </init-param>
    <init-param>
       <param-name>crossDomainSessionSecurity</param-name>
       <param-value>false</param-value>
    </init-param>
    <init-param>
      <param-name>activeReverseAjaxEnabled</param-name>
      <param-value>true</param-value>
    </init-param>
    <init-param>
      <param-name>allowScriptTagRemoting</param-name>
      <param-value>true</param-value>
    </init-param>
  </servlet>