Thanks Shilendra for useful links. But my exception is securityException, about XSRF attack.
java.lang.SecurityException: Blocked request without GWT permutation header (XSRF attack?) I think its not about serialisation or out of memory error. Thanks Deepak On Thu, Sep 6, 2012 at 6:47 AM, Shilendra Sharma <[email protected]>wrote: > Hi Deepak > > this link also > > > https://groups.google.com/forum/?fromgroups=#!topic/google-web-toolkit/NAHy6gl1OTQ > > > https://groups.google.com/forum/?fromgroups=#!topic/google-appengine-java/cDtSdosQwEk > > > https://groups.google.com/forum/#!msg/google-web-toolkit/r_gmai1f9cU/nJLhK0Ns1QoJ > > Regards & Thanks > Shilendra Sharma > +919891343808 > [email protected] > > > > On Thu, Sep 6, 2012 at 6:44 AM, Shilendra Sharma > <[email protected]>wrote: > >> Hi Deepak >> >> See this may be helpful for you >> >> >> http://stackoverflow.com/questions/6556600/exception-while-dispatching-incoming-rpc-call-gwt >> >> >> Shilendra >> >> >> >> On Thu, Sep 6, 2012 at 5:05 AM, Deepak Singh <[email protected]>wrote: >> >>> >>> I have a java based app which is running on app engine. From end is GWT >>> based. >>> >>> Some of the logs are following error. I am not able to understand it. >>> >>> >>> 1. 2012-09-05 20:01:52.845 >>> >>> javax.servlet.ServletContext log: Exception while dispatching incoming >>> RPC call >>> java.lang.SecurityException: Blocked request without GWT permutation >>> header (XSRF attack?) >>> at >>> com.google.gwt.user.server.rpc.RemoteServiceServlet.checkPermutationStrongName(RemoteServiceServlet.java:272) >>> at >>> com.google.gwt.user.server.rpc.RemoteServiceServlet.processCall(RemoteServiceServlet.java:203) >>> at >>> com.google.gwt.user.server.rpc.RemoteServiceServlet.processPost(RemoteServiceServlet.java:248) >>> at >>> com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62) >>> at javax.servlet.http.HttpServlet.service(HttpServlet.java:637) >>> at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) >>> at >>> org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511) >>> at >>> org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1166) >>> at >>> com.google.appengine.tools.appstats.AppstatsFilter.doFilter(AppstatsFilter.java:141) >>> at >>> org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1157) >>> at >>> com.google.apphosting.utils.servlet.ParseBlobUploadFilter.doFilter(ParseBlobUploadFilter.java:102) >>> at >>> org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1157) >>> at >>> com.google.apphosting.runtime.jetty.SaveSessionFilter.doFilter(SaveSessionFilter.java:35) >>> at >>> org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1157) >>> at >>> com.google.apphosting.utils.servlet.TransactionCleanupFilter.doFilter(TransactionCleanupFilter.java:43) >>> at >>> org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1157) >>> at >>> org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:388) >>> at >>> org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216) >>> at >>> org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182) >>> at >>> org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:765) >>> at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:418) >>> at >>> com.google.apphosting.runtime.jetty.AppVersionHandlerMap.handle(AppVersionHandlerMap.java:249) >>> at >>> org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152) >>> at org.mortbay.jetty.Server.handle(Server.java:326) >>> at >>> org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542) >>> at >>> org.mortbay.jetty.HttpConnection$RequestHandler.headerComplete(HttpConnection.java:923) >>> at >>> com.google.apphosting.runtime.jetty.RpcRequestParser.parseAvailable(RpcRequestParser.java:76) >>> at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404) >>> at >>> com.google.apphosting.runtime.jetty.JettyServletEngineAdapter.serviceRequest(JettyServletEngineAdapter.java:135) >>> at >>> com.google.apphosting.runtime.JavaRuntime$RequestRunnable.run(JavaRuntime.java:447) >>> at >>> com.google.tracing.TraceContext$TraceContextRunnable.runInContext(TraceContext.java:452) >>> at >>> com.google.tracing.TraceContext$TraceContextRunnable$1.run(TraceContext.java:458) >>> at com.google.tracing.TraceContext.runInContext(TraceContext.java:698) >>> at >>> com.google.tracing.TraceContext$AbstractTraceContextCallback.runInInheritedContextNoUnref(TraceContext.java:336) >>> at >>> com.google.tracing.TraceContext$AbstractTraceContextCallback.runInInheritedContext(TraceContext.java:328) >>> at >>> com.google.tracing.TraceContext$TraceContextRunnable.run(TraceContext.java:456) >>> at >>> com.google.apphosting.runtime.ThreadGroupPool$PoolEntry.run(ThreadGroupPool.java:251) >>> at java.lang.Thread.run(Thread.java:679) >>> >>> 2. I2012-09-05 20:01:52.848 >>> >>> com.google.appengine.tools.appstats.AppstatsFilter doFilter: Appstats >>> available: /appstats/details?time=1346855512845 >>> >>> >>> Can some one let me know what about this error? >>> >>> >>> >>> >>> -- >>> Deepak Singh >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Google App Engine" group. >>> To post to this group, send email to [email protected]. >>> To unsubscribe from this group, send email to >>> [email protected]. >>> For more options, visit this group at >>> http://groups.google.com/group/google-appengine?hl=en. >>> >> >> > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. > -- Deepak Singh -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
