Change in ovirt-engine[ovirt-engine-3.5]: webadmin: Enable RESTAPI CSRF protection

piotr.kliczewski at gmail.com piotr.kliczewski at gmail.com
Fri Jul 11 08:37:15 UTC 2014


Piotr Kliczewski has submitted this change and it was merged.

Change subject: webadmin: Enable RESTAPI CSRF protection
......................................................................


webadmin: Enable RESTAPI CSRF protection

This patch changes the webadmin application so that it will always
request CSRF protection when creating RESTAPI sessions.

Change-Id: I92c41f18bcbb90441f352444dcc78408e8e61b16
Related: https://bugzilla.redhat.com/1077441
Signed-off-by: Juan Hernandez <juan.hernandez at redhat.com>
(cherry picked from commit 86c27b6f57b9361dce29245324e3eec6314841ef)
---
M frontend/webadmin/modules/webadmin/src/main/java/org/ovirt/engine/ui/webadmin/plugin/restapi/RestApiSessionManager.java
1 file changed, 5 insertions(+), 1 deletion(-)

Approvals:
  Juan Hernandez: Verified; Looks good to me, but someone else must approve
  Vojtech Szocs: Looks good to me, approved
  Keith Robertson: Looks good to me, but someone else must approve



-- 
To view, visit http://gerrit.ovirt.org/29850
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I92c41f18bcbb90441f352444dcc78408e8e61b16
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-engine
Gerrit-Branch: ovirt-engine-3.5
Gerrit-Owner: Juan Hernandez <juan.hernandez at redhat.com>
Gerrit-Reviewer: Alexander Wels <awels at redhat.com>
Gerrit-Reviewer: Juan Hernandez <juan.hernandez at redhat.com>
Gerrit-Reviewer: Keith Robertson <kroberts at redhat.com>
Gerrit-Reviewer: Piotr Kliczewski <piotr.kliczewski at gmail.com>
Gerrit-Reviewer: Spenser Shumaker <sshumake at redhat.com>
Gerrit-Reviewer: Vojtech Szocs <vszocs at redhat.com>
Gerrit-Reviewer: automation at ovirt.org
Gerrit-Reviewer: oVirt Jenkins CI Server



More information about the Engine-commits mailing list