dwr:CSRF Security Error

今天用dwr帮一童鞋做一哈文件上传，结果老是报错：CSRF Security Error 。后面查了一下，修改一下web.xml文件即可

 

原：

<servlet>
    <servlet-name>DWRServlet</servlet-name>
    <servlet-class>org.directwebremoting.servlet.DwrServlet</servlet-class>
    <init-param>
	<param-name>debug</param-name>
	<param-value>true</param-value>
	</init-param>
	<init-param>   
	<param-name>activeReverseAjaxEnabled</param-name>   
	<param-value>true</param-value>   
	</init-param> 
  </servlet>
  <servlet-mapping>
    <servlet-name>DWRServlet</servlet-name>
    <url-pattern>/dwr/*</url-pattern>
  </servlet-mapping>

 

 

添加下面红色部分

<servlet>
    <servlet-name>DWRServlet</servlet-name>
    <servlet-class>org.directwebremoting.servlet.DwrServlet</servlet-class>
    <init-param>
	<param-name>debug</param-name>
	<param-value>true</param-value>
	</init-param>
	<init-param>   
	<param-name>activeReverseAjaxEnabled</param-name>   
	<param-value>true</param-value>   
     </init-param> 
     <init-param>
             <param-name>crossDomainSessionSecurity</param-name>
             <param-value>false</param-value>
      </init-param>
      <init-param>
            <param-name>allowScriptTagRemoting</param-name>
            <param-value>true</param-value>
      </init-param>

  </servlet>
  <servlet-mapping>
    <servlet-name>DWRServlet</servlet-name>
    <url-pattern>/dwr/*</url-pattern>
  </servlet-mapping>