From: Brett Porter <brett@apache.org>
Date: Wed, 15 Dec 2010 04:04:59 +0000 (+0000)
Subject: [MRM-1445] disable referrer check by default
X-Git-Tag: archiva-1.4-M1~875
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=5ce9fd50256c094314a8d8e57b60f33c84a9521b;p=archiva.git

[MRM-1445] disable referrer check by default
Merged from: r1049409


git-svn-id: https://svn.apache.org/repos/asf/archiva/trunk@1049410 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/archiva-modules/archiva-web/archiva-webapp/src/main/resources/struts.xml b/archiva-modules/archiva-web/archiva-webapp/src/main/resources/struts.xml
index a640fe6ff..78e83d858 100644
--- a/archiva-modules/archiva-web/archiva-webapp/src/main/resources/struts.xml
+++ b/archiva-modules/archiva-web/archiva-webapp/src/main/resources/struts.xml
@@ -41,7 +41,9 @@
         <interceptor-ref name="paramFilter">
           <param name="blocked">externalResult</param>
         </interceptor-ref>
-        <interceptor-ref name="redbackSecureActions"/>
+        <interceptor-ref name="redbackSecureActions">
+          <param name="enableReferrerCheck">false</param>
+        </interceptor-ref>
         <interceptor-ref name="redbackPolicyEnforcement"/>
         <interceptor-ref name="configuration"/>
         <interceptor-ref name="validation">
@@ -57,7 +59,9 @@
         <interceptor-ref name="redbackAutoLogin"/>
         <interceptor-ref name="defaultStack"/>
         <interceptor-ref name="redbackPolicyEnforcement"/>
-        <interceptor-ref name="redbackSecureActions"/>
+        <interceptor-ref name="redbackSecureActions">
+          <param name="enableReferrerCheck">false</param>
+        </interceptor-ref>
         <interceptor-ref name="validation">
           <param name="excludeMethods">input,back,cancel,browse</param>
         </interceptor-ref>