Re: [che-dev] Support for CSRF prevention

[Sergii Kabashniuk <skabashnyuk@xxxxxxxxxxx>]

Hello Zoya

On Wed, Mar 11, 2015 at 12:02 PM, Pronyakova, Zoya <zoya.pronyakova@xxxxxxx> wrote:

Dear colleagues,

 

We are currently working on solution for authentication/CSRF/XSS support for CHE in HCP (SAP HANA Cloud Platform)

I am wondering whether you plan to introduce a common CSRF prevention support in CHE?

Right now we can recomend to configure standart tomcat CsrfPreventionFilter  http://tomcat.apache.org/tomcat-7.0-doc/config/filter.html#CSRF_Prevention_Filter

Is this the thing you are looking for?

Sergii Kabashniuk

 

 

Thanks,

Zoya

 

Zoya Pronyakova

Team Architect, Development Experience, Technology Cloud Experience

SAP Labs Israel, 15 Hatidhar st., Raanana 43665, Israel

 

M  +972-54-420-4894

T   +972-9-777-9877

E zoya.pronyakova@xxxxxxx

 

_______________________________________________
che-dev mailing list
che-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/che-dev