Not sure what Novanic is .. Is it a third party library that you are using
to make RPC calls?

If you (or a framework on your behalf) is writing custom code to make RPC
calls, make sure that the RPC requests have the two HTTP headers you mention
below. Its a trick GWT uses to prevent cross site request forgery.

If you just want a quick fix, override the method protected void
checkPermutationStrongName() throws SecurityException in your RPC Servlet.
Just leave your implementation empty. It makes it easier for an attacker to
perform CSRF requests, so use this as a last resort.


--Sri



On 12 April 2010 12:31, Rodolphe Gomes <rodolphe.go...@gmail.com> wrote:

> Good morning,
>
> Trying to call a service throws:
>
> Blocked request without GWT base path header (XSRF attack?)
> With Ezproxy headers X-GWT-Permutation and X-GWT-Module-Base are not
> created.
>
> I am using eventservice from Novanic.
>
> Any ideas ?
>
> Thanks for any help !
>
> --
> You received this message because you are subscribed to the Google Groups
> "Google Web Toolkit" group.
> To post to this group, send email to google-web-tool...@googlegroups.com.
> To unsubscribe from this group, send email to
> google-web-toolkit+unsubscr...@googlegroups.com<google-web-toolkit%2bunsubscr...@googlegroups.com>
> .
> For more options, visit this group at
> http://groups.google.com/group/google-web-toolkit?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google Web Toolkit" group.
To post to this group, send email to google-web-tool...@googlegroups.com.
To unsubscribe from this group, send email to 
google-web-toolkit+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-web-toolkit?hl=en.

Reply via email to