yes it would :P Do you see a solution anyway....both tomcat instances use the same domain https://www.example.com They use isapi
________________________________________ Van: Pid * [[email protected]] Verzonden: maandag 5 november 2012 9:30 Aan: Tomcat Users List Onderwerp: Re: CSRF on multiple tomcat instances On 2 Nov 2012, at 14:23, Wilfred Duizers <[email protected]> wrote: > Hello, > > I am running 2 Tomcat instances on 1 server. So far nothing special :-) > Both: > Apache Tomcat/7.0.25 > JVM 1.6.0_20-b02 > > When a user clicks a link in the webapplication running on Tomcat instance 1 > (portal) an application running on Tomcat instance 2 is opened. Is it > possible to send the nonce with the link? Because it's running another > instance... Would defeat the point if you sent all of the info in the same request, no? p > > Kind regards, > Wilfred --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
