private HttpMethod GetMethod(Abp.Web.HttpVerb verb)
 {
     if (verb == HttpVerb.Post)
     {
         return(HttpMethod.Post);
     }
     else if (verb == HttpVerb.Get)
     {
         return(HttpMethod.Get);
     }
     else if (verb == HttpVerb.Delete)
     {
         return(HttpMethod.Delete);
     }
     else if (verb == HttpVerb.Put)
     {
         return(HttpMethod.Put);
     }
     else if (verb == HttpVerb.Trace)
     {
         return(HttpMethod.Trace);
     }
     else if (verb == HttpVerb.Options)
     {
         return(HttpMethod.Options);
     }
     else if (verb == HttpVerb.Head)
     {
         return(HttpMethod.Head);
     }
     else
     {
         return(HttpMethod.Post);
     }
 }
Пример #2
0
        public static bool ShouldValidate(
            this IAbpAntiForgeryManager manager,
            IAbpAntiForgeryWebConfiguration antiForgeryWebConfiguration,
            MethodInfo methodInfo,
            Abp.Web.HttpVerb httpVerb,
            bool defaultValue)
        {
            if (!antiForgeryWebConfiguration.IsEnabled)
            {
                return(false);
            }

            if (methodInfo.IsDefined(typeof(ValidateAbpAntiForgeryTokenAttribute), true))
            {
                return(true);
            }

            if (ReflectionHelper.GetSingleAttributeOfMemberOrDeclaringTypeOrDefault <DisableAbpAntiForgeryTokenValidationAttribute>(methodInfo) != null)
            {
                return(false);
            }

            if (antiForgeryWebConfiguration.IgnoredHttpVerbs.Contains(httpVerb))
            {
                return(false);
            }

            if (methodInfo.DeclaringType?.IsDefined(typeof(ValidateAbpAntiForgeryTokenAttribute), true) ?? false)
            {
                return(true);
            }

            return(defaultValue);
        }
Пример #3
0
 private HttpMethod GetMethod(Abp.Web.HttpVerb verb)
 {
     if (verb == HttpVerb.Post)
     {
         return(HttpMethod.Post);
     }
     else if (verb == HttpVerb.Get)
     {
         return(HttpMethod.Get);
     }
     else if (verb == HttpVerb.Delete)
     {
         return(HttpMethod.Delete);
     }
     else if (verb == HttpVerb.Put)
     {
         return(HttpMethod.Put);
     }
     else
     {
         return(HttpMethod.Post);
     }
 }