spring-framework

Spring Framework

Tree: cc78d40c6b

Sebastien Deleuze cc78d40c6b Fix SockJS origin check This commit introduces the following changes: - Requests without Origin header are not rejected anymore - Disable Iframe when allowedOrigins is not empty and not equals to * - The Iframe is not cached anymore in order to have a reliable origin check - allowedOrigins must not be null or empty - allowedOrigins format is now validated (should be * or start by http(s)://) Issue: SPR-12660 (cherry picked from commit `9b3319b`)	11 years ago
..
java/org/springframework/web/socket	Fix SockJS origin check	11 years ago
resources	Add an option to disable automatic addition of CORS header	11 years ago

Sebastien Deleuze cc78d40c6b Fix SockJS origin check

This commit introduces the following changes:
 - Requests without Origin header are not rejected anymore
 - Disable Iframe when allowedOrigins is not empty and not equals to *
 - The Iframe is not cached anymore in order to have a reliable origin check
 - allowedOrigins must not be null or empty
 - allowedOrigins format is now validated (should be * or start by http(s)://)

Issue: SPR-12660
(cherry picked from commit 9b3319b)

11 years ago

java/org/springframework/web/socket Fix SockJS origin check 11 years ago

resources Add an option to disable automatic addition of CORS header 11 years ago