Simplify configuration of crumbs (in the UI) and programmatic usage from

hudson-behavior.js.

- Default crumb descriptor no longer presents any configuration UI. If a user
  wants to change the crumb field name, that is now done through a system
  property, hudson.security.csrf.requestfield.

- Default crumb issuer uses the Hudson secret key as the salt, so this no longer
  needs to be a configuration option.

- layout.jelly initializes a crumb structure in hudson-behavior.js so that
  Javascript functions can have access to this information without need it
  passed in by the caller.



git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@18856 71c3de6d-444a-0410-be80-ed276b4c234a
This commit is contained in:
dty committed 2009-06-12 21:04:23 +00:00
1 parent 009023e6ae
commit ca3420c1e5
15 files changed
+61 -135

No files matched your search

+1 -7
View File
@@ -1172,13 +1172,7 @@ public class Functions {
if (isAutoRefresh(req)) {
builder.append("null");
} else {
builder.append("'return replaceDescription(");
builder.append("\\'");
builder.append(getCrumbRequestField());
builder.append("\\',\\'");
builder.append(getCrumb(req));
builder.append("\\'");
builder.append(");'");
builder.append("'return replaceDescription();'");
}
return builder.toString();
}