严重: A request has been denied as a potential CSRF attack.

A request has been denied as a potential CSRF attack.”

在web.xml配置文件中修改dwr的配置：

Xml代码

1. <servlet>  
2.  <servlet-name>dwr-invoker</servlet-name>  
3.   <servlet-class>org.directwebremoting.servlet.DwrServlet</servlet-class>  
4.   <init-param>  
5.    <param-name>debug</param-name>  
6.    <param-value>true</param-value>  
7.   </init-param>  
8.   <!-- 新加corssDomainSessionSecurity参数 -->  
9.   <init-param>      
10.             <param-name>crossDomainSessionSecurity</param-name>      
11.             <param-value>false</param-value>      
12.     </init-param>  
13.  </servlet>  

 加入红色部分后。问题就消失了。

标签：dwr,request,been,attack,potential,CSRF,denied
来源： https://www.cnblogs.com/qianzf/p/12625593.html