As the server has no idea in which mode the client runs, the client has to 
tell it the server.

The default RpcRequestBuilder adds the header "x-gwt-permutation" to server 
requests to prevent CSRF attacks. It contains the permutation name in 
production mode and "HostedMode" when running DevMode. So maybe you can 
simply evaluate this header in the servlet.

-- J.

-- 
You received this message because you are subscribed to the Google Groups 
"Google Web Toolkit" group.
To view this discussion on the web visit 
https://groups.google.com/d/msg/google-web-toolkit/-/Bz89R72mGacJ.
To post to this group, send email to google-web-toolkit@googlegroups.com.
To unsubscribe from this group, send email to 
google-web-toolkit+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-web-toolkit?hl=en.

Reply via email to