[JavaEE] 防止偽造跨站請求(CSRF) Prevent Cross-Site Request Forgery

防止偽造跨站請求(CSRF) Prevent Cross-Site Request Forgery

if(request.getHeader("Referer") == null || request.getHeader("Referer").indexOf("http://localhost:8080/myProject/") < 0) return false;

透過referer來判斷Domain是否相同


==

在survey時有搜尋到一篇文章, 說Tomcat7新的feature有支援擋csrf

有興趣可以看看

Tomcat 7 新特性学习之一 - 防止CSRF攻击

[Spring] Spring相關筆記

Chapter 3. The IoC container
http://static.springsource.org/spring/docs/2.5.x/reference/beans.html


3.11. Annotation-based configuration
http://static.springsource.org/spring/docs/2.5.x/reference/beans.html#beans-autowired-annotation


CCC生活札記: 了解什麼是 Spring Web MVC

Configure Eclipse For Tomcat and Spring Framework

[Spring] Eclipse 安裝Spring IDE

安裝Spring IDE前需先安裝 Graphical Editing Framework (GEF)

再安裝Spring IDE

Help > Software Updates > Find and Install.


新增一個位址：
http://springide.org/updatesite

Introduction to Spring IDE 2.0