opendev/gerrit
Code Issues Proposed changes

Serve XSRF_COOKIE with /accounts/self/detail

Browse Source 
Bug: Issue 4285
Change-Id: I03d78cf23e23328acab4284d8080dddc99ce1337
This commit is contained in:
Viktar Donich
2016-08-19 16:20:39 -07:00
parent 579abe5bec
commit 07a49d5cb5
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
gerrit-httpd/src/main/java/com/google/gerrit/httpd/UrlModule.java
View File

@@ -64,6 +64,7 @@ class UrlModule extends ServletModule {
if (options.enableDefaultUi()) { if (options.enableDefaultUi()) {
filter("/").through(XsrfCookieFilter.class); filter("/").through(XsrfCookieFilter.class);
filter("/accounts/self/detail").through(XsrfCookieFilter.class);
serve("/").with(HostPageServlet.class); serve("/").with(HostPageServlet.class);
serve("/Gerrit").with(LegacyGerritServlet.class); serve("/Gerrit").with(LegacyGerritServlet.class);
serve("/Gerrit/*").with(legacyGerritScreen()); serve("/Gerrit/*").with(legacyGerritScreen());