OWASP / www-project-csrfguard

The aim of this project is to protect Java applications against CSRF attacks with the use of Synchronizer Tokens

https://owasp.org/www-project-csrfguard/

OWASP/www-project-csrfguard Issues

request through a proxyPass problem
Closed 2 months ago1
Document the configurations options that enables overwriting values through the web.xml
Updated 4 months ago4
Add automation to minify and transpile the JS code to ES5
Updated 7 months ago
Create integration tests
Updated 7 months ago
Migrate and update documentation
Updated 7 months ago7
Redirect functionality on invalid or no token in request
Updated 8 months ago9
How to use it? Where do I find the documentation?
Closed a year ago
Empty token after login
Closed a year ago1
what csrfGuard.js doing?
Closed a year ago1
Usage of XMLHttpRequest in a WebComponent with Google Polymer 1.x
Closed a year ago1
Add Jakarta support
Closed a year ago12
Printing the CsrfGuard's config leads to java.lang.reflect.InaccessibleObjectException in Java 17
Closed a year ago5
Ability to configure multiple values for org.owasp.csrfguard.domainOrigin
Closed a year ago1
CSRF Guard 4.1.3 - Invalid session error when used with apache and weblogic server, particularly only on Browser Edge in IE 11 Mode
Closed 2 years ago
OWASP CSRFGuard is vulnerable to CVE-2021-28490
Closed 2 years ago12
Disable serving Internet Explorer by default
Closed 2 years ago
CsrfGuard.regexpPatternCache is not thread safe
Closed 2 years ago1
NPE in case of un-exploded WAR deployments
Closed 2 years ago1
Backward compatibility and support for varies deployment.
Closed 2 years ago
Bad performance in serving the javascript
Closed 2 years ago7
NullPointerException for Javascript related settings
Closed 2 years ago2
Update GSON version due to reported CWE
Closed 2 years ago2
pageTokenSynchronizationTolerance check looks wrong
Closed 2 years ago10
Inaccurate Properties Printout
Closed 2 years ago9
NewTokenLandingPage not working
Closed 2 years ago18
Impacted jars by Apache Log4j Tool : Zero Day in Ubiquitous Under Active Attack (CVE-2021-44228) ??
Closed 2 years ago
IE11 error: startsWith not supported
Closed 3 years ago3
NullPointerException when using JSP Tags and the CSRFGuard is disabled.
Closed 3 years ago6
Additional Referer header validation can be bypassed
Closed 3 years ago1
Replace the logging logic with SLF4J
Closed 3 years ago2
unecessary character ' * ' in the index.md
Closed 3 years ago2
add the code of conduct
Closed 3 years ago4
JDK version and TLS protocol errors and solutions
Closed 3 years ago9
Problem with : org.owasp.csrfguard.CsrfGuardServletContextListener ?
Closed 3 years ago3
The "TokenPerPage" approach is not applied to AJAX requests
Closed 4 years ago1
Provide support for stateless web applications
Closed 4 years ago2
Provide support for on-demand or time-based token rotation/invalidation
Closed 4 years ago2
Removing execCommand from ConfigPropertiesCascadeCommonUtils
Closed 4 years ago2
Lots of copied code from the Grouper repository.
Updated 3 years ago2
Why csrfguard creates so many Tomcat sessions?
Closed 3 years ago4
Documentation: csrfguard.properties improvement
Closed 3 years ago1
Improve the test coverage
Updated 3 years ago1
how to reload properties file in the server ?
Closed 3 years ago2
External config in js file wrongly evaluated
Closed 3 years ago3
3.1.0 release code here is different to the 3.1.0 jar in Maven Central
Closed 3 years ago1
Create maven configuration to automate deployment to OSSRH
Closed 3 years ago3
charset encoding is missing from JavaScriptServlet responses
Closed 3 years ago4
Ability to extend CsrfGuardFilter
Closed 3 years ago3