[orion-dev] Bug 435067 - XSRF protection in webdavImpl.js

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

[orion-dev] Bug 435067 - XSRF protection in webdavImpl.js

From: "Margewitsch, Erwin" <erwin.margewitsch@xxxxxxx>
Date: Fri, 17 Oct 2014 12:10:16 +0000
Accept-language: en-US
Delivered-to: orion-dev@xxxxxxxxxxx
List-archive: <https://dev.eclipse.org/mailman/private/orion-dev>
List-help: <mailto:orion-dev-request@eclipse.org?subject=help>
List-subscribe: <https://dev.eclipse.org/mailman/listinfo/orion-dev>, <mailto:orion-dev-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://dev.eclipse.org/mailman/options/orion-dev>, <mailto:orion-dev-request@eclipse.org?subject=unsubscribe>
Thread-index: AQHP6gNQE5OazaV45kOI2txFu/rxJQ==
Thread-topic: Bug 435067 - XSRF protection in webdavImpl.js
User-agent: Microsoft-MacOutlook/14.4.4.140807

Hi,

During the work to implement XSRF protection [1] in orion I found one more _javascript_ file which is using directly an XMLHttpRequest object with a method different from ‘get’. So in this place I would like to add XSRF Protection like I did in the other places (see [2]).

Can you give me some hints how to do this for webdavImpl.js? I would like to reuse my code from [orion/xsrfUtils] (see [2]) but I don’t know how…

Erwin

[1] https://bugs.eclipse.org/bugs/show_bug.cgi?id=435067

[2] https://git.eclipse.org/r/#/c/26742

Follow-Ups:
- Re: [orion-dev] Bug 435067 - XSRF protection in webdavImpl.js
  - From: Simon Kaegi
- Re: [orion-dev] Bug 435067 - XSRF protection in webdavImpl.js
  - From: Mark Macdonald

Prev by Date: Re: [orion-dev] Styling a contributed page.link.category?
Next by Date: Re: [orion-dev] [flux-dev] cf-deployer button
Previous by thread: [orion-dev] Styling a contributed page.link.category?
Next by thread: Re: [orion-dev] Bug 435067 - XSRF protection in webdavImpl.js
Index(es):
- Date
- Thread

Breadcrumbs