Repository: openmeetings Updated Branches: refs/heads/3.3.x 0428ecf37 -> 44800f8a1
no jira: CSRF filter should be added to the application Project: http://git-wip-us.apache.org/repos/asf/openmeetings/repo Commit: http://git-wip-us.apache.org/repos/asf/openmeetings/commit/44800f8a Tree: http://git-wip-us.apache.org/repos/asf/openmeetings/tree/44800f8a Diff: http://git-wip-us.apache.org/repos/asf/openmeetings/diff/44800f8a Branch: refs/heads/3.3.x Commit: 44800f8a18c7e9a30b379ef057067cb26181b532 Parents: 0428ecf Author: Maxim Solodovnik <[email protected]> Authored: Tue May 16 10:25:15 2017 +0700 Committer: Maxim Solodovnik <[email protected]> Committed: Tue May 16 10:25:15 2017 +0700 ---------------------------------------------------------------------- .../org/apache/openmeetings/web/app/Application.java | 12 ++++++++++++ 1 file changed, 12 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/openmeetings/blob/44800f8a/openmeetings-web/src/main/java/org/apache/openmeetings/web/app/Application.java ---------------------------------------------------------------------- diff --git a/openmeetings-web/src/main/java/org/apache/openmeetings/web/app/Application.java b/openmeetings-web/src/main/java/org/apache/openmeetings/web/app/Application.java index b40c9e2..691f550 100644 --- a/openmeetings-web/src/main/java/org/apache/openmeetings/web/app/Application.java +++ b/openmeetings-web/src/main/java/org/apache/openmeetings/web/app/Application.java @@ -92,6 +92,9 @@ import org.apache.wicket.core.request.handler.BookmarkableListenerRequestHandler import org.apache.wicket.core.request.handler.ListenerRequestHandler; import org.apache.wicket.core.request.mapper.MountedMapper; import org.apache.wicket.markup.html.WebPage; +import org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener; +import org.apache.wicket.protocol.ws.api.WebSocketMessageBroadcastHandler; +import org.apache.wicket.protocol.ws.api.WebSocketRequestHandler; import org.apache.wicket.request.IRequestHandler; import org.apache.wicket.request.Url; import org.apache.wicket.request.component.IRequestablePage; @@ -140,6 +143,15 @@ public class Application extends AuthenticatedWebApplication implements IApplica getResourceSettings().getStringResourceLoaders().add(0, new LabelResourceLoader()); //FIXME TODO v3 on the way getJavaScriptLibrarySettings().setJQueryReference(new JavaScriptResourceReference(DynamicJQueryResourceReference.class, DynamicJQueryResourceReference.VERSION_2)); + getRequestCycleListeners().add(new CsrfPreventionRequestCycleListener() { + @Override + protected boolean isChecked(IRequestHandler handler) { + if (handler instanceof WebSocketRequestHandler || handler instanceof WebSocketMessageBroadcastHandler) { + return false; + } + return super.isChecked(handler); + } + }); super.init();
