Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: detect Flow PUSH requests as internal framework requests (#19085) (CP: 24.3) #19110

Merged
merged 1 commit into from
Apr 4, 2024
Merged

fix: detect Flow PUSH requests as internal framework requests (#19085) (CP: 24.3) #19110

merged 1 commit into from
Apr 4, 2024

Commits on Apr 4, 2024

  1. fix: detect Flow PUSH requests as internal framework requests (#19085) 

    HandlerHelper is currently not considering Flow PUSH requests
(/VAADIN/push) as internal, preventing VaadinWebSecurity to
ignore CSRF checks.
The issues happen only for ping requests; the connection request
is not affected because it is a GET request.

Fixes #19075
    @mcollovati @vaadin-bot
    mcollovati authored and vaadin-bot committed Apr 4, 2024
    Configuration menu
    Copy the full SHA
    fa1560d View commit details
    Browse the repository at this point in the history