Change in ovirt-engine[master]: webadmin: Enable RESTAPI CSRF protection

juan.hernandez at redhat.com juan.hernandez at redhat.com
Thu Jul 10 09:07:08 UTC 2014


Juan Hernandez has submitted this change and it was merged.

Change subject: webadmin: Enable RESTAPI CSRF protection
......................................................................


webadmin: Enable RESTAPI CSRF protection

This patch changes the webadmin application so that it will always
request CSRF protection when creating RESTAPI sessions.

Change-Id: I92c41f18bcbb90441f352444dcc78408e8e61b16
Related: https://bugzilla.redhat.com/1077441
Signed-off-by: Juan Hernandez <juan.hernandez at redhat.com>
---
M frontend/webadmin/modules/webadmin/src/main/java/org/ovirt/engine/ui/webadmin/plugin/restapi/RestApiSessionManager.java
1 file changed, 5 insertions(+), 1 deletion(-)

Approvals:
  Juan Hernandez: Verified; Looks good to me, approved
  Alexander Wels: Looks good to me, but someone else must approve



-- 
To view, visit http://gerrit.ovirt.org/29682
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I92c41f18bcbb90441f352444dcc78408e8e61b16
Gerrit-PatchSet: 3
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Juan Hernandez <juan.hernandez at redhat.com>
Gerrit-Reviewer: Alexander Wels <awels at redhat.com>
Gerrit-Reviewer: Juan Hernandez <juan.hernandez at redhat.com>
Gerrit-Reviewer: Keith Robertson <kroberts at redhat.com>
Gerrit-Reviewer: Spenser Shumaker <sshumake at redhat.com>
Gerrit-Reviewer: Vojtech Szocs <vszocs at redhat.com>
Gerrit-Reviewer: automation at ovirt.org
Gerrit-Reviewer: oVirt Jenkins CI Server



More information about the Engine-commits mailing list