Hi, CsrfManager.check has an "isContentRequest" boolean parameter to determine whether to additionally check csrfParameter if the csrfHeader header is not set. However I'm seeing no caller where isContentRequest = true. Am I missing something?
Thanks, Florent -- Florent Guillaume, Director of R&D, Nuxeo Open Source, Java EE based, Enterprise Content Management (ECM) http://www.nuxeo.com http://www.nuxeo.org +33 1 40 33 79 87
