csrf.module.xml

Clone Tools
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
LDEV-5440 Update libraries to new versions

  1. … 70 more files in changeset.
LDEV-5440 Update CSRFGuard from 4.1.3 to 4.3.0-jakarta

Customisation was needed:

In CsrfGuardUtils use

public static String normalizeResourceURI(final String resourceURI) {

String normalizedResourceURI = resourceURI.startsWith("/") ? resourceURI : '/' + resourceURI;

// LAMS LDEV-4932 Replace multiple slashes with a single one, so it works the same as Spring MVC

normalizedResourceURI = normalizedResourceURI.replaceAll("/{2,}", "/");

return normalizedResourceURI;

}

Also update WF module schemas.

  1. … 44 more files in changeset.
LDEV-4932 Squash multiple slashes into one when matching secured paths

  1. … 5 more files in changeset.
LDEV-5304 Update CSRF Guard to version 4.1.3

  1. … 6 more files in changeset.
LDEV-4932 Squash multiple slashes into one when matching secured paths

  1. … 2 more files in changeset.
Revert "LDEV-4932 Initial integration of CSRF Guard"

This reverts commit c5a709e4cb42d0729ad3fbd814714fb27dd844df.

It should have been in a separate branch.

  1. … 9 more files in changeset.
LDEV-4932 Initial integration of CSRF Guard

Add library and configuration file. Only Edit Profile form has a token

injected into form. Other POSTed forms will be stopped by the Guard,

with an error logged.

  1. … 9 more files in changeset.
LDEV-4932 Initial integration of CSRF Guard

Add library and configuration file. Only Edit Profile form has a token

injected into form. Other POSTed forms will be stopped by the Guard,

with an error logged.

  1. … 9 more files in changeset.