开发者

Weird Requests/DefaultSavedRequests from other websites in my app?

greetings all i am using spring security 3.0.2 and i am using apache,tomcat i was discovering the sessions on my web app and found out too many sessions with used time=0 and the description of one of them was something like:

Attribute name : SPRING_SECURITY_SAVED_REQUEST_KEY  
Attribute value : DefaultSavedRequest[http://someStrangeWebsite.com/myappname/]

i am wondering why such a weird beha开发者_开发问答viour occurs ?

also i added a filter in the app to debug the incoming request urls and i found out that many request urls where something like: http://someStrangeWebsite.com/myappname/

which is also very strange to me. can anyone help me please ?


Perhaps somebody sends HTTP requests with

Host: someStrangeWebsite.com 

to your site. Since Tomcat doesn't know DNS names of the server it's running on, these requests look valid.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜