Re: CsrfManager csrfParameter

[Florian Müller]

Hi Florent,

Check the class CmisBrowserBindingServlet, line 387.

- Florian

Hi,

CsrfManager.check has an "isContentRequest" boolean parameter to
determine whether to additionally check csrfParameter if the
csrfHeader header is not set. However I'm seeing no caller where
isContentRequest = true. Am I missing something?

Thanks,
Florent