tree 81d112cae5805603781f6ec865ba20644c0e9070
parent ccfbab9aa45219faf3d2ff8a05adad9d4229f8cf
author meder@google.com <meder@google.com@8db76d5a-ed1c-0410-87a9-c151d255dfc7> 1296421923 +0000
committer meder@google.com <meder@google.com@8db76d5a-ed1c-0410-87a9-c151d255dfc7> 1296421923 +0000

This change adds couple of things:
- abstract class which calls abstract XSRF token validation method based on
annotations (@XsrfProtect, @NoXsrfProtect).
- GWT RPC XSRF protection based on the above class, which derives XSRF token
from session cookie by computing MD5 over the cookie's value. Token can be
obtained from XsrfTokenService and must be set on client RPC endpoint via
HasRpcToken interface.


Review at http://gwt-code-reviews.appspot.com/1251801


git-svn-id: https://google-web-toolkit.googlecode.com/svn/trunk@9657 8db76d5a-ed1c-0410-87a9-c151d255dfc7