Re: [PR] NIFI-12487 Add CSRF Protection to Registry [nifi]

2023-12-18 Thread via GitHub
bbende merged PR #8136: URL: https://github.com/apache/nifi/pull/8136 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@nifi.apache.org

Re: [PR] NIFI-12487 Add CSRF Protection to Registry [nifi]

2023-12-13 Thread via GitHub
exceptionfactory commented on code in PR #8136: URL: https://github.com/apache/nifi/pull/8136#discussion_r1425477157 ## nifi-registry/nifi-registry-core/nifi-registry-web-api/src/main/java/org/apache/nifi/registry/web/security/authentication/csrf/CsrfRequestMatcher.java: ## @@ -

Re: [PR] NIFI-12487 Add CSRF Protection to Registry [nifi]

2023-12-13 Thread via GitHub
dan-s1 commented on code in PR #8136: URL: https://github.com/apache/nifi/pull/8136#discussion_r1425419827 ## nifi-registry/nifi-registry-core/nifi-registry-web-api/src/main/java/org/apache/nifi/registry/web/security/authentication/csrf/CsrfRequestMatcher.java: ## @@ -0,0 +1,45

Re: [PR] NIFI-12487 Add CSRF Protection to Registry [nifi]

2023-12-12 Thread via GitHub
exceptionfactory commented on code in PR #8136: URL: https://github.com/apache/nifi/pull/8136#discussion_r1424783911 ## nifi-registry/nifi-registry-core/nifi-registry-web-api/src/main/java/org/apache/nifi/registry/web/security/authentication/csrf/StandardCsrfTokenRequestAttributeHandler

Re: [PR] NIFI-12487 Add CSRF Protection to Registry [nifi]

2023-12-12 Thread via GitHub
exceptionfactory commented on code in PR #8136: URL: https://github.com/apache/nifi/pull/8136#discussion_r1424783483 ## nifi-registry/nifi-registry-core/nifi-registry-web-api/src/main/java/org/apache/nifi/registry/web/security/authentication/csrf/CsrfRequestMatcher.java: ## @@ -

Re: [PR] NIFI-12487 Add CSRF Protection to Registry [nifi]

2023-12-12 Thread via GitHub
dan-s1 commented on code in PR #8136: URL: https://github.com/apache/nifi/pull/8136#discussion_r1424400190 ## nifi-registry/nifi-registry-core/nifi-registry-web-api/src/main/java/org/apache/nifi/registry/web/security/authentication/csrf/CsrfRequestMatcher.java: ## @@ -0,0 +1,45

[PR] NIFI-12487 Add CSRF Protection to Registry [nifi]

2023-12-06 Thread via GitHub
exceptionfactory opened a new pull request, #8136: URL: https://github.com/apache/nifi/pull/8136 # Summary [NIFI-12487](https://issues.apache.org/jira/browse/NIFI-12487) Adds Cross-Site Request Forgery protection to NiFi Registry using the Spring Security CSRF Filter and several comp