Merge pull request #496 from coheigea/AMQ-7434

AMQ-7434 - Enable Jolokia CORS strict-checking by default

assembly/src/release/webapps/api/WEB-INF/classes/jolokia-access.xml

@@ -17,6 +17,11 @@
 -->
 <restrict>
 
+  <!-- Enforce that an Origin/Referer header is present to prevent CSRF -->
+  <cors>
+    <strict-checking/>
+  </cors>
+
   <!-- deny calling operations or getting attributes from these mbeans -->
   <deny>
     <mbean>
@@ -31,4 +36,4 @@
     </mbean>
   </deny>
 
-</restrict>
+</restrict>