<init-param>
<param-name>crossDomainSessionSecurity</param-name>
<param-value>false</param-value>
</init-param>

更多推荐

严重: A request has been denied as a potential CSRF attack.