Nemcio/SCM-Manager
1
0
Fork 0
mirror of https://github.com/scm-manager/scm-manager.git synced 2026-02-05 06:09:12 +01:00
Code Issues Packages Projects Releases Activity

implemented xsrf protection, see issue #793

Browse Source
This commit is contained in:
Sebastian Sdorra
2016-01-23 22:02:25 +01:00
parent 451cd910a5
commit 488d4e3323
7 changed files with 511 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
scm-webapp/src/main/java/sonia/scm/ScmServletModule.java
View File

@@ -162,6 +162,7 @@ import sonia.scm.net.ahc.ContentTransformer;
import sonia.scm.net.ahc.DefaultAdvancedHttpClient;
import sonia.scm.net.ahc.JsonContentTransformer;
import sonia.scm.net.ahc.XmlContentTransformer;
import sonia.scm.security.XsrfProtectionFilter;
import sonia.scm.web.UserAgentParser;
/**
@@ -365,6 +366,9 @@ public class ScmServletModule extends ServletModule
filter(PATTERN_ALL).through(LoggingFilter.class);
}
// protect api agains xsrf attacks
filter(PATTERN_RESTAPI).through(XsrfProtectionFilter.class);
/*
* filter(PATTERN_PAGE,
* PATTERN_STATIC_RESOURCES).through(StaticResourceFilter.class);