I modified the GWT sample app to be Xsrf safe. 
http://code.google.com/p/xsrf-safe/

On Jun 9, 12:55 pm, Nick <nix...@gmail.com> wrote:
> As a workaround you can create a copy of the Utility class in your
> project. Just make sure its in the original package 'package
> com.google.gwt.util.tools', and deleted the methods with restricted
> code (if deploying to gae).
>
> p.s. You might need to adjust your build path so that your code comes
> before the gwt library.
>
> On May 17, 11:25 am, Karl <karl.rest...@gmail.com> wrote:
>
>
>
>
>
>
>
> > Hi,
> > thank you for the quick answer, I created an issue for 
> > ithttp://code.google.com/p/google-web-toolkit/issues/detail?id=6367.
>
> > I have been using gwt-dispatch for another project and I really like
> > it, but I thought I'd try the new stuff. I suppose that have to wait a
> > bit...
>
> > /Karl
>
> > On May 17, 4:24 pm, David Chandler <drfibona...@google.com> wrote:
>
> > > Hi Karl,
>
> > > This looks like a GWT bug, as gwt-servlet should not have any dependencies
> > > on gwt-dev. Please file in the issue tracker.
>
> > > As an aside, have you looked at the Command pattern as implemented by
> > > gwt-dispatch or RequestFactory? These  are both easier than securing each
> > > service individually IMHO.
>
> > > Thanks,
> > > /dmc
>
> > > On Tue, May 17, 2011 at 12:14 PM, Karl <karl.rest...@gmail.com> wrote:
> > > > Hi!
> > > > I'm trying to implement the 2.3 xsrf protection as described here
> > > >http://code.google.com/webtoolkit/doc/latest/DevGuideSecurityRpcXsrf....
> > > > but I run into a NoClassDefFoundError:
>
> > > > java.lang.NoClassDefFoundError: com/google/gwt/util/tools/Utility
> > > >        at
>
> > > > com.google.gwt.user.server.rpc.XsrfTokenServiceServlet.generateTokenValue(X
> > > >  srfTokenServiceServlet.java:
> > > > 198) [:]
> > > >        at
>
> > > > com.google.gwt.user.server.rpc.XsrfTokenServiceServlet.getNewXsrfToken(Xsrf
> > > >  TokenServiceServlet.java:
> > > > 163) [:]
> > > >        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [:
> > > > 1.6.0_20]
> > > >        at
> > > > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:
> > > > 57) [:1.6.0_20]
> > > >        at
>
> > > > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImp
> > > >  l.java:
> > > > 43) [:1.6.0_20]
> > > >        at java.lang.reflect.Method.invoke(Method.java:616) [:1.6.0_20]
> > > >        at
> > > > com.google.gwt.user.server.rpc.RPC.invokeAndEncodeResponse(RPC.java:
> > > > 569) [:]
> > > >        ... 28 more
> > > > Caused by: java.lang.ClassNotFoundException:
> > > > com.google.gwt.util.tools.Utility from BaseClassLoader@31843ea1{vfs:///
> > > > home/user/dev/JBoss/distrib/server/myCompany/deploy/myWar.war}
> > > >        at
>
> > > > org.jboss.classloader.spi.base.BaseClassLoader.loadClass(BaseClassLoader.ja
> > > >  va:
> > > > 480) [jboss-classloader.jar:2.2.0.GA]
> > > >        at java.lang.ClassLoader.loadClass(ClassLoader.java:266) 
> > > > [:1.6.0_20]
> > > >        ... 35 more
>
> > > > The only place I can find this com/google/gwt/util/tools/Utility class
> > > > is in gwt-dev.jar but deploying this results in the following
> > > > exception:
> > > > Caused by: LifecycleException:  Error initializaing :
> > > > javax.management.ReflectionException: Cannot find method addChild with
> > > > this signature
>
> > > > same as described here:
>
> > > >http://groups.google.com/group/google-web-toolkit/browse_thread/threa...
>
> > > > I'm running JBoss  6.0. and I build my project with maven2 as
> > > > described here
>
> > > >http://groups.google.com/group/codehaus-mojo-gwt-maven-plugin-users/b...
>
> > > > What am I doing wrong? Any help would be greatly appreciated.
> > > > /Karl
>
> > > > --
> > > > You received this message because you are subscribed to the Google 
> > > > Groups
> > > > "Google Web Toolkit" group.
> > > > To post to this group, send email to 
> > > > google-web-toolkit@googlegroups.com.
> > > > To unsubscribe from this group, send email to
> > > > google-web-toolkit+unsubscr...@googlegroups.com.
> > > > For more options, visit this group at
> > > >http://groups.google.com/group/google-web-toolkit?hl=en.
>
> > > --
> > > David Chandler
> > > Developer Programs Engineer, Google Web Toolkit
> > > w:http://code.google.com/
> > > b:http://googlewebtoolkit.blogspot.com/
> > > t: @googledevtools

-- 
You received this message because you are subscribed to the Google Groups 
"Google Web Toolkit" group.
To post to this group, send email to google-web-toolkit@googlegroups.com.
To unsubscribe from this group, send email to 
google-web-toolkit+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-web-toolkit?hl=en.

Reply via email to