DWR CSRF Security Error

 ERROR org.directwebremoting.dwrp.BaseCallMarshaller - A request has been denied as a potential CSRF attack.
修改web.xml文件
<servlet>
    <servlet-name>dwr-invoker</servlet-name>
    <servlet-class>org.directwebremoting.servlet.DwrServlet</servlet-class>
    <init-param>
      <param-name>debug</param-name>
      <param-value>true</param-value>
    </init-param>
    <init-param>
       <param-name>crossDomainSessionSecurity</param-name>
       <param-value>false</param-value>
    </init-param>
    <init-param>
      <param-name>activeReverseAjaxEnabled</param-name>
      <param-value>true</param-value>
    </init-param>
    <init-param>
      <param-name>allowScriptTagRemoting</param-name>
      <param-value>true</param-value>
    </init-param>
  </servlet>

 

 

你可能感兴趣的:(Security)