Invalid CSRF Token 'null' was found on the request parameter '_csrf'...

阿新 • • 發佈：2019-01-11

一、問題日誌：
HTTP Status 403 - Invalid CSRF Token ‘null’ was found on the request parameter ‘_csrf’ or header ‘X-CSRF-TOKEN’
二、問題原因：
Spring Security 4.0之後，引入了CSRF，預設狀態為開啟。CSRF和RESTful技術有衝突。CSRF預設支援的方法： GET|HEAD|TRACE|OPTIONS，不支援POST。CSRF（Cross-site request forgery跨站請求偽造，也被稱為“One Click Attack” 或者Session Riding，攻擊方通過偽造使用者請求訪問受信任站點。
三、採用的解決辦法：
（1）方法一、
修改工程下WebSecurityConfig.java
@Override
protected void configure(HttpSecurity http) throws Exception {
http.authorizeRequests()
.antMatchers(“/”, “/home”).permitAll()
.and()
.formLogin()
.loginPage(“/login”).permitAll()
.and()
.logout().logoutUrl(“/logout”)
.logoutSuccessUrl(“/hello”)
.permitAll();
http.csrf().disable();//在原本的配置檔案下新增這行程式碼，禁用security的csrf
}
（2）方法二、
將http.csrf().disable();註釋掉

@Override
    protected void configure(HttpSecurity http) throws Exception {
        //http.csrf().disable();
        http.authorizeRequests()
                        .antMatchers("/", "/springbootbase").permitAll()
                        .anyRequest().authenticated()
                        .and()
                    .formLogin 
()
                        .loginPage("/login")
                        .failureUrl("/login?error")
                        .permitAll() //5
                        .and()
                    .logout().permitAll();
    }

將index.html 改成JSP 檔案： index.jsp
將csrf token 作為表單的隱藏域一起提交即可解決

<!DOCTYPE html> 

<html xmlns:th="http://www.thymeleaf.org"
      xmlns:sec="http://www.thymeleaf.org/thymeleaf-extras-springsecurity4">
<head>
    <title>Hello World!</title>
</head>
<body>
    <h1 th:inline="text">Hello World</h1>
    <form th:action="@{/logout}" action="./logout" method="post">
        <input type="hidden" name="${_csrf.parameterName}" value="${_csrf.token}"/>
        <input type="submit" value="Sign Out"/>
    </form>
</body>
</html>

重啟tomcat server, 執行

Invalid CSRF Token 'null' was found on the request parameter '_csrf'...

一、問題日誌： HTTP Status 403 - Invalid CSRF Token ‘null’ was found on the request parameter ‘_csrf’ or header ‘X-CSRF-TOKEN’ 二、問題原因：

[轉]The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path

right clas rup b- row 添加按鈕 n) 1-1 自帶完整錯誤信息： THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS"AS IS" AND ANY EXPRESS O

新建 jsp異常，The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path

prop 選擇 library path per png class pro found 　　新項目，新建jsp頁面的時候報異常： Multiple annotations found at this line: - The superclass "java

出現錯誤日誌：The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path

div 錯誤日誌 a.out library logs openss product arc nec tomcat6出現錯誤日誌：信息: The APR based Apache Tomcat Native library which allows optimal pe

eclipse更改workspace中出現The superclass "javax.servlet.http.HttpServlet" was not found on the Java----問題》》

win runtime cli 名稱 tail 一個 fig workspace found 第一步：那是因為在項目中沒有告訴它應該在哪個tomcat中運行，右擊項目名稱-----》build path--》configure path---->library--

The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path

uil 路徑 next run library per 錯誤 https 取消新建WEB項目出現如下錯誤，可以這樣來修正， The superclass "javax.servlet.http.HttpServlet" was not found on the Java

The Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path

6.0 java 解決 cti .dll man apach jdk ive 今天，我在Eclipse中啟動Tomcat6.0時，發生如下異常： The Apache Tomcat Native library which allows opt

eclipse - The superclass "javax.servlet.http.HttpServlet" was not found on the Java

https 技術分享 eclips vax logs let not super images eclipse - The superclass "javax.servlet.http.HttpServlet" was not found on th

JavaWeb:報錯信息The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path

服務器軟件 vax ini AC 信息 enc 點擊 let 選擇服務器 JavaWeb: 報錯信息The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path 一般

[IDE - Eclipse] JSP報錯:The superclass “javax.servlet.http.HttpServlet” was not found on the Java Build Path

引入 ips eclips size eclipse -i let details javax 是因為Eclipse的Web項目不自動引入相關jar包. Right Click on the Project ? Properties ? Project Facets. Yo

MyEclipse中，使用Maven新建web項目後，提示The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path

web png -a ips cti code 使用 te pro ron 問題描述：　　使用 MyEclipse + Maven 建立了一個 Javaweb工程，在編寫 JSP頁面時，頂端出現“紅色”的報錯信息：The superclass

Eclipse中jsp異常 The superclass "javax.servlet.http.HttpServlet" was not found on the Java Bu

問題描述學習ssh商城的時候，將資料中給的靜態檔案引入jsp資料夾，但是每個檔案都有一個大紅×，，然後在jsp檔案裡面出現了The superclass"javax.servlet.http.HttpServlet"

java錯誤：The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path

java錯誤：The superclass “javax.servlet.http.HttpServlet” was not found on the Java Build Path 我們在用Eclipse進行Java web開發時，可能會出現這樣的錯誤：The superclass j

錯誤：The superclass "javax.servlet.xxx" was not found on the Java Build Path

當一個Java Web專案從一臺電腦移到另一臺電腦時，個人感覺環境都一致，但是就是在使用的時候出現一些小紅叉，特別是在一些jsp頁面出現最多：如：The superclass "javax.servlet.http.HttpServlet" was not found on the Jav

使用maven建立專案時報錯The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path

Description Resource Path Location Type The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path index.jsp /ssm-crud/Web

The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path Maven專案報錯：Failed to execute goal org.apache.maven.plugi

① The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path 完整錯誤資訊： THIS SOFTWARE IS PROVIDED BY THE

Tomcat啟動慢原因之二 he APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.

Tomcat啟動時提示：資訊: The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.

HttpServletRequest cannot be resolved to a type The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path

HttpServletRequest cannot be resolved to a type The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path 解決辦法: 這是因為專案中缺少兩個

Eclipse中新建jsp提示The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path

場景新建jsp頁面，提示如下解決右擊專案--Build Path--Config Build Path Add Library--Server Runtime next--選擇Tomcat--Finish Apply--Appy

The superclass "javax.servlet.http.HttpServlet" was not found on the Java Build Path

①.　　　　1.右鍵點選專案->build path->configure build path->add library->server runtime->apache tomcat 無果，無法新增。 ②. 　　1.開啟Eclipse

Invalid CSRF Token 'null' was found on the request parameter '_csrf'...

相關推薦