-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeff,

On 4/7/2011 12:08 PM, Mathew Samuel wrote:
>     <filter-mapping>
>         <filter-name>CSRFPreventionFilter</filter-name>
>         <url-pattern>*</url-pattern>
>     </filter-mapping>

The javadoc for that class says that the filter should be mapped to "/*"
not "*".

> Notice that as an entry point I have specified '/do/Start' which is
> fine up to a point. Meaning that the Start page does load. Trouble is
> that what loads is basically what looks like a text-based page. No
> images, no functionality behind buttons. Just wondering if some one
> has had success using this particular filter and could give me
> pointers or perhaps an example on how I can properly use it.

Does the webapp work properly when the CsrfPreventionListener is not
enabled? If so, I'll bet that invalid URL pattern is somehow involved.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk2eJlIACgkQ9CaO5/Lv0PCGRgCfTTI5f8lIdMkAlh/Jp9NvNnn6
pfEAn2xMFcXmD9ANtTIGoNm0Kc2YHzsF
=Y2Jb
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to