DWR

We have recently upgraded our weblogic version from 9.2 to 9.2.4 on admin side get error pop as session error

Details

  • Type: Bug Bug
  • Status: Closed Closed
  • Priority: Critical Critical
  • Resolution: Duplicate
  • Affects Version/s: 2.0.1
  • Fix Version/s: 3.0.RC2
  • Component/s: Core
  • Documentation Required:
    Yes
  • Description:
    Hide
    when we navigate to some of the tabs for admin which uses the ajax request to fetch the data we see the pop-error as session error.

    I tried the below one which works but cannot use this thing in prod ,please suggest what would be the workaround in production

    <init-param>
            <param-name>crossDomainSessionSecurity</param-name>
            <param-value>false</param-value>
    </init-param>
    Show
    when we navigate to some of the tabs for admin which uses the ajax request to fetch the data we see the pop-error as session error. I tried the below one which works but cannot use this thing in prod ,please suggest what would be the workaround in production <init-param>         <param-name>crossDomainSessionSecurity</param-name>         <param-value>false</param-value> </init-param>
  1. dwr_error.bmp
    (842 kB)
    anthureddy
    27/Apr/11 1:22 PM

Issue Links

Activity

Hide
anthureddy added a comment - 27/Apr/11 1:30 PM

Here is the request headers when i debug using firebug:

User-Agent Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.16) Gecko/20110319 Firefox/3.6.16 GTB7.1 ( .NET CLR 3.5.30729) SearchToolbar/1.2
Accept text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Accept-Language en-us,en;q=0.5
Accept-Encoding gzip,deflate
Accept-Charset ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive 115
Connection keep-alive
Content-Type text/plain; charset=UTF-8
Referer https://gen1-dev02-admin.lab.wagerworks.com/WagerWareAdmingen1/games/gameMenu!loadGameMenu.action
Content-Length 235
Cookie JSESSIONID=4Q1VN41Q61T4gCgyFgDyvgTsyy51ZpCRmLGW3TQh5x6G11JsSYHv!-1394341400

Show
anthureddy added a comment - 27/Apr/11 1:30 PM Here is the request headers when i debug using firebug: User-Agent Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.16) Gecko/20110319 Firefox/3.6.16 GTB7.1 ( .NET CLR 3.5.30729) SearchToolbar/1.2 Accept text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language en-us,en;q=0.5 Accept-Encoding gzip,deflate Accept-Charset ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive 115 Connection keep-alive Content-Type text/plain; charset=UTF-8 Referer https://gen1-dev02-admin.lab.wagerworks.com/WagerWareAdmingen1/games/gameMenu!loadGameMenu.action Content-Length 235 Cookie JSESSIONID=4Q1VN41Q61T4gCgyFgDyvgTsyy51ZpCRmLGW3TQh5x6G11JsSYHv!-1394341400
Hide
David Marginian added a comment - 27/Apr/11 1:31 PM

DWR-26

This has been fixed in the next release of DWR which you can download and try on our Bamboo CI build site.

This has also been brought and discussed numerous times on our mailing list.

In the future please follow the proper procedures before creating Jira issues.

Thank you.

Show
David Marginian added a comment - 27/Apr/11 1:31 PM DWR-26 This has been fixed in the next release of DWR which you can download and try on our Bamboo CI build site. This has also been brought and discussed numerous times on our mailing list. In the future please follow the proper procedures before creating Jira issues. Thank you.
Hide
anthureddy added a comment - 27/Apr/11 1:39 PM

Thank you for instant reply ,

I tried downloading the version 3.0 before posting the issue . When i try with that it throws the pop-up error as
CSRF Attack error ?

Any specific version you want me to download ..

Show
anthureddy added a comment - 27/Apr/11 1:39 PM Thank you for instant reply , I tried downloading the version 3.0 before posting the issue . When i try with that it throws the pop-up error as CSRF Attack error ? Any specific version you want me to download ..
Hide
David Marginian added a comment - 27/Apr/11 1:45 PM

Our latest development build from our Bamboo CI server:
http://ci.directwebremoting.org/bamboo/browse/DWRTRUNK-ALL-250/artifact

If you don't want to use a dev build your options are:

1) Allow cookies in your weblogic config (they go back and forth on allowing or disallowing them - it is annoying).
2) Disable DWR's security per your comment in the issue description.

Show
David Marginian added a comment - 27/Apr/11 1:45 PM Our latest development build from our Bamboo CI server: http://ci.directwebremoting.org/bamboo/browse/DWRTRUNK-ALL-250/artifact If you don't want to use a dev build your options are: 1) Allow cookies in your weblogic config (they go back and forth on allowing or disallowing them - it is annoying). 2) Disable DWR's security per your comment in the issue description.
Hide
anthureddy added a comment - 27/Apr/11 2:47 PM

Tried getting the new dwr.jar file & cookies are arleady enabled .
In the firebug it gives me an error as You must include DWR engine before including this file

Show
anthureddy added a comment - 27/Apr/11 2:47 PM Tried getting the new dwr.jar file & cookies are arleady enabled . In the firebug it gives me an error as You must include DWR engine before including this file
Hide
David Marginian added a comment - 27/Apr/11 3:00 PM

Yes, that is a result of a change we made. The error is very self explanatory - you will need to include engine.js before you include your dwr interface scripts.

Show
David Marginian added a comment - 27/Apr/11 3:00 PM Yes, that is a result of a change we made. The error is very self explanatory - you will need to include engine.js before you include your dwr interface scripts.
Hide
anthureddy added a comment - 27/Apr/11 4:20 PM

Perfect works now ..thank you

Show
anthureddy added a comment - 27/Apr/11 4:20 PM Perfect works now ..thank you

People

Dates

  • Created:
    27/Apr/11 1:22 PM
    Updated:
    27/Apr/11 4:20 PM
    Resolved:
    27/Apr/11 1:31 PM