waysun一路陽光

          不輕易服輸,不輕言放棄.--心是夢的舞臺,心有多大,舞臺有多大。踏踏實實做事,認認真真做人。

            BlogJava :: 首頁 :: 新隨筆 :: 聯系 ::  :: 管理 ::
            167 隨筆 :: 1 文章 :: 64 評論 :: 0 Trackbacks

          錯誤描述:

          org.directwebremoting.dwrp.BaseDwrpHandler - A request has been denied as a potential CSRF attack.
          org.directwebremoting.dwrp.BaseCallHandler - Exception while processing batch
          java.lang.SecurityException: CSRF Security Error

            at org.directwebremoting.dwrp.BaseDwrpHandler.checkNotCsrfAttack(BaseDwrpHandler.java:85)
            at org.directwebremoting.dwrp.BaseCallHandler.handle(BaseCallHandler.java:76)
            at org.directwebremoting.servlet.UrlProcessor.handle(UrlProcessor.java:120)
            at org.directwebremoting.servlet.DwrServlet.doPost(DwrServlet.java:141)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
            at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
            at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
            at org.apache.struts2.dispatcher.ActionContextCleanUp.doFilter(ActionContextCleanUp.java:99)
            at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
            at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
            at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
            at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
            at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
            at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:104)
            at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
            at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:261)
            at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
            at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process  (Http11Protocol.java:581)
            at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
            at java.lang.Thread.run(Thread.java:619)

           

          解決辦法:

          修改 web.xml 中 DWR 配置信息

          原:

          <servlet> 
                <servlet-name>dwr-invoker</servlet-name> 
               <servlet-class>org.directwebremoting.spring.DwrSpringServlet</servlet-class> 
               <init-param>
                <param-name>debug</param-name>
                <param-value>true</param-value>
            </init-param>
          </servlet>

           

          加入跨域調用配置信息(紅色部分),修改為:

          <servlet> 
                <servlet-name>dwr-invoker</servlet-name> 
                <servlet-class>org.directwebremoting.spring.DwrSpringServlet</servlet-class> 
                <init-param>
                       <param-name>debug</param-name>
                       <param-value>true</param-value>
                </init-param>
                <init-param>
                       <param-name>crossDomainSessionSecurity</param-name>
                       <param-value>false</param-value>
                </init-param>
                <init-param>
                      <param-name>allowScriptTagRemoting</param-name>
                      <param-value>true</param-value>
                </init-param>

          </servlet>

          posted on 2010-07-01 11:18 weesun一米陽光 閱讀(2225) 評論(0)  編輯  收藏 所屬分類: 收藏的文章
          主站蜘蛛池模板: 德安县| 安多县| 三原县| 临沭县| 天门市| 合江县| 安多县| 兰坪| 新建县| 广汉市| 韶关市| 湾仔区| 奉新县| 嘉鱼县| 南靖县| 英山县| 莲花县| 浮山县| 辽阳市| 兰坪| 宁明县| 伊宁市| 绥阳县| 沾化县| 盐城市| 同心县| 晋江市| 施甸县| 上栗县| 陕西省| 邹平县| 华蓥市| 铅山县| 安宁市| 天台县| 三都| 甘孜| 天津市| 长岭县| 石狮市| 灌南县|