diff options
| author | Leif Åstrand <leif@vaadin.com> | 2013-04-25 12:45:45 +0300 |
|---|---|---|
| committer | Vaadin Code Review <review@vaadin.com> | 2013-04-25 12:15:48 +0000 |
| commit | a46c97bd7936ea8793618bb54ce19ac32c61f71d (patch) | |
| tree | d66c1be61070be9620f8107011bd8a372a9e7a72 /WebContent | |
| parent | 220b1150ca411a63009d7f30e0400dc062f10c27 (diff) | |
| download | vaadin-framework-a46c97bd7936ea8793618bb54ce19ac32c61f71d.tar.gz vaadin-framework-a46c97bd7936ea8793618bb54ce19ac32c61f71d.zip | |
Verify CSRF token before accepting new CSRF connection (#11635)
* Can't open push connection during client-side init because CSRF token
is not available at that point. This allows simplifying the
initialization because the push state will not be checked until the
first response has been processed.
* Add helper for checking the CSRF token
Change-Id: I31da1ac669dc9a581cbd66f58c07f10ea4b8b676
Diffstat (limited to 'WebContent')
| -rw-r--r-- | WebContent/VAADIN/vaadinBootstrap.js | 6 |
1 files changed, 0 insertions, 6 deletions
diff --git a/WebContent/VAADIN/vaadinBootstrap.js b/WebContent/VAADIN/vaadinBootstrap.js index ae50289477..b2995dd0bd 100644 --- a/WebContent/VAADIN/vaadinBootstrap.js +++ b/WebContent/VAADIN/vaadinBootstrap.js @@ -120,12 +120,6 @@ url += '&theme=' + encodeURIComponent(theme); } - // Tell the UI what pushMode it is configured to use - var pushMode = getConfig('pushMode'); - if (pushMode !== undefined) { - url += '&v-pushMode=' + encodeURIComponent(pushMode); - } - var extraParams = getConfig('extraParams') if (extraParams !== undefined) { url += extraParams; |