CODEWITHSUNDEEP
gwtrpc
Delli Kilari
Delli Kilari

Reputation: 1016

while dispatching incoming RPC call in gwt

I have RPC call to get some values from Database, I using GWT, where am using RPC call, the same code works fine with IE, but the same code doesn't work with Firefox. This does not make sense.

2011-07-28 15:27:47.657:WARN:/:Exception while dispatching incoming RPC call
java.lang.SecurityException: Blocked request without GWT permutation header (XSRF attack?)
    at com.google.gwt.user.server.rpc.RemoteServiceServlet.checkPermutationStrongName(RemoteServiceServlet.java:272)
    at com.google.gwt.user.server.rpc.RemoteServiceServlet.processCall(RemoteServiceServlet.java:203)
    at com.google.gwt.user.server.rpc.RemoteServiceServlet.processPost(RemoteServiceServlet.java:248)
    at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)

Upvotes: 1

Views: 3638

Answers (1)

Tassos Bassoukos
Tassos Bassoukos

Reputation: 16152

In GWT 2.3 cros-site request forgery was added, I assume you have already looked at http://code.google.com/webtoolkit/doc/latest/DevGuideSecurityRpcXsrf.html and made the necessary changes?

Upvotes: 3

Related Questions