commit d816d76ac001f323a717af896bf8d4c861eead24
author meder@google.com <meder@google.com@8db76d5a-ed1c-0410-87a9-c151d255dfc7> Mon Feb 07 00:09:46 2011 +0000
committer meder@google.com <meder@google.com@8db76d5a-ed1c-0410-87a9-c151d255dfc7> Mon Feb 07 00:09:46 2011 +0000
tree 8fb56298779f51f3614a34bd5d56a685caf02a65
parent df8fb0022079d6fe1c44e372b8f42814acc18e01

This change adds couple of things:
- abstract class which calls abstract XSRF token validation method based on
annotations (@XsrfProtect, @NoXsrfProtect).
- GWT RPC XSRF protection based on the above class, which derives XSRF token
from session cookie by computing MD5 over the cookie's value. Token can be
obtained from XsrfTokenService and must be set on client RPC endpoint via
HasRpcToken interface.


git-svn-id: https://google-web-toolkit.googlecode.com/svn/trunk@9677 8db76d5a-ed1c-0410-87a9-c151d255dfc7