Skip to content

Instantly share code, notes, and snippets.

@hallettj
Created July 15, 2011 18:20
Show Gist options
  • Save hallettj/1085217 to your computer and use it in GitHub Desktop.
Save hallettj/1085217 to your computer and use it in GitHub Desktop.
CSRF protection techniques
GET /__services/v2/rest/browserEvents/1310753774420?e=activityStream.poll
Accept: application/json, text/javascript, */*; q=0.01
Cookie: jive_wysiwygtext_height=845; jive.server.info="serverName=brewspace.jiveland.com:serverPort=443:contextPath=:localName=localhost.localdomain:localPort=9001:localAddr=127.0.0.1"; JSESSIONID=1310674633500msE1CFA7B08138FBC7B9618EC2273CC269.node02; SPRING_SECURITY_REMEMBER_ME_COOKIE=amVzc2UuaGFsbGV0dDoxMzExODg0MjMzNTAwOmJiODI3YzRkZGU3ZjRmMTA2NjZkYzJmMjBiYmY3YWFj; jive.user.loggedIn=true; demoStyle=mainCSS; __utma=194160894.284716925.1284424263.1310689961.1310753078.814; __utmb=194160894.5.10.1310753078; __utmc=194160894; __utmz=194160894.1310753078.814.65.utmcsr=jira.jivesoftware.com|utmccn=(referral)|utmcmd=referral|utmcct=/browse/JIVE-4471
Host: brewspace.jiveland.com
Referer: https://brewspace.jiveland.com/content
User-Agent:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.56 Safari/535.1
X-J-Token: 39fd41326e56a1e0a075
X-Requested-With: XMLHttpRequest
throw 'allowIllegalResourceCall is false.';
{
"events": [{
"id": -6185080273232181289,
"timestamp": 1310753780950,
"event": {
"lastRefreshTimes": {
"0": 1310753653091,
"1": 1310753603340,
"2": 1302723646336,
"7": 1310517293477,
"8": 1310517299555,
"9": 0
},
"maxCount": 100,
"newActivityCounts": {
"0": 7,
"1": 1,
"2": 70,
"7": 0,
"8": 0,
"9": 0,
"10": 7
},
"lastCheckTimes": {
"0": 1310753780950,
"1": 1310753780973,
"2": 1310753780985,
"7": 1310753781087,
"8": 1310753781087,
"9": 0
},
"fullCounts": {
"1": {
"unreadItems": [{
"type": 1464927464,
"valid": true,
"id": 63167,
"objectType": 1464927464
}],
"unreadCount": 1
},
"7": 0,
"8": 0,
"9": 0
}
},
"providerName": "activityStream.poll"
}],
"wait": 300000,
"now": 1310753780950
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment