CSRF Security Error

整合spring和DWR时出现了CSRF Security Error。

解决办法:

修改 web.xml 中 DWR 配置信息

原:

<servlet>  
      <servlet-name>dwr-invoker</servlet-name>  
     <servlet-class>org.directwebremoting.spring.DwrSpringServlet</servlet-class>  
     <init-param> 
      <param-name>debug</param-name> 
      <param-value>true</param-value> 
  </init-param>
</servlet>

 

加入跨域调用配置信息(绿色部分)，修改为:

<servlet>  
      <servlet-name>dwr-invoker</servlet-name>  
      <servlet-class>org.directwebremoting.spring.DwrSpringServlet</servlet-class>  
      <init-param> 
             <param-name>debug</param-name> 
             <param-value>true</param-value> 
      </init-param>
      <init-param>
             <param-name>crossDomainSessionSecurity</param-name>
             <param-value>false</param-value>
      </init-param>
      <init-param>
            <param-name>allowScriptTagRemoting</param-name>
            <param-value>true</param-value>
      </init-param>
</servlet>

转载于:https://www.cnblogs.com/JavaTechLover/archive/2012/08/10/2633063.html