Subsonic Forum

This is a new install in Tomcat 7. I found this thread that discusses how to handle the various issues with running in Tomcat 7 but I can't find anything about the CSRF attack. Does anyone have any suggestions?

ERROR org.directwebremoting.dwrp.BaseDwrpHandler - A request has been denied as a potential CSRF attack

Add this to web.xml:

<init-param>
<param-name>crossDomainSessionSecurity</param-name>
<param-value>false</param-value>
</init-param>

It looks like that is side stepping some security but it works. If anyone knows a better solution than I would like to hear it.

This helped. Thank you, doahh!