CSRFGuard 3 Installation - Revision history

Azzeddine RAMRAMI at 16:35, 13 February 2019

2019-02-13T16:35:42Z

Ccronemberger: replaced urls with esheri3 by the correct ones wiht aramrami

2015-01-22T10:10:05Z

replaced urls with esheri3 by the correct ones wiht aramrami

Azzeddine RAMRAMI: /* Declare CsrfGuard in Deployment Descriptor */

2014-10-03T10:11:28Z

‎Declare CsrfGuard in Deployment Descriptor

Azzeddine RAMRAMI: /* Declare CsrfGuard in Deployment Descriptor */

2014-10-03T10:10:14Z

‎Declare CsrfGuard in Deployment Descriptor

Azzeddine RAMRAMI: /* Declare CsrfGuard in Deployment Descriptor */

2014-10-03T10:09:46Z

‎Declare CsrfGuard in Deployment Descriptor

Azzeddine RAMRAMI: /* Declare CsrfGuard in Deployment Descriptor */

2014-10-03T10:06:16Z

‎Declare CsrfGuard in Deployment Descriptor

Azzeddine RAMRAMI: /* Declare CsrfGuard in Deployment Descriptor */

2014-10-03T10:05:26Z

‎Declare CsrfGuard in Deployment Descriptor

Azzeddine RAMRAMI: /* Declare CsrfGuard in Deployment Descriptor */

2014-10-03T10:04:33Z

‎Declare CsrfGuard in Deployment Descriptor

Azzeddine RAMRAMI: /* Declare CsrfGuard in Deployment Descriptor */

2014-10-03T10:03:47Z

‎Declare CsrfGuard in Deployment Descriptor

Esheridan: /* Declare CsrfGuard in Deployment Descriptor */

2011-02-12T17:41:49Z

‎Declare CsrfGuard in Deployment Descriptor

@@ Line 9: / Line 9: @@
 = Declare CsrfGuard in Deployment Descriptor =
-After placing Owasp.CsrfGuard.jar in your application's classpath, you'll need to declare CsrfGuard context parameters along with a HttpSessionListener and a Filter. The following web.xml snippet was extracted from the [https://github.com/aramrami/OWASP-CSRFGuard/tree/master/Owasp.CsrfGuard.Test Owasp.CsrfGuard.Test] web application:
+After placing Owasp.CsrfGuard.jar in your application's classpath, you'll need to declare CsrfGuard context parameters along with a HttpSessionListener and a Filter. The following web.xml snippet was extracted from the [https://github.com/aramrami/OWASP-CSRFGuard/tree/master/csrfguard-test Owasp.CsrfGuard.Test] web application:
          <listener>
@@ Line 29: / Line 29: @@
 The code snippet defines two context parameters: Owasp.CsrfGuard.Config and Owasp.CsrfGuard.Config.Print. The Owasp.CsrfGuard.Config parameter is required and specifies the location of the CSRFGuard properties file. CSRFGuard will search for the properties file specified by searching the following locations in order of appearance: the application's classpath, a directory accessible by the container, or an arbitrary absolute path. The Owasp.CsrfGuard.Config.Print parameter is optional and simply instructs CSRFGuard to display the parsed properties to the application server log file. Finally, we declare and enable the CSRFGuard HttpSessionListener with a class name of org.owasp.csrfguard.CsrfGuardListener. The CsrfGuardListener class is responsible for consuming context parameters and initializing CsrfGuard context for all newly created HttpSessions.
-Now that we have the CsrfGuard context initialization facilities in place, we'll need to declare and map the enforcement mechanism: CsrfGuardFilter. CsrfGuardFilter is responsible for facilitating the integration of the CsrfGuard object and associated token verification logic within the JavaEE web application. The following web.xml snippet was extracted from the [https://github.com/aramrami/OWASP-CSRFGuard/tree/master/Owasp.CsrfGuard.Test Owasp.CsrfGuard.Test] web application:
+Now that we have the CsrfGuard context initialization facilities in place, we'll need to declare and map the enforcement mechanism: CsrfGuardFilter. CsrfGuardFilter is responsible for facilitating the integration of the CsrfGuard object and associated token verification logic within the JavaEE web application. The following web.xml snippet was extracted from the [https://github.com/aramrami/OWASP-CSRFGuard/tree/master/csrfguard-test Owasp.CsrfGuard.Test] web application:

@@ Line 29: / Line 29: @@
 The code snippet defines two context parameters: Owasp.CsrfGuard.Config and Owasp.CsrfGuard.Config.Print. The Owasp.CsrfGuard.Config parameter is required and specifies the location of the CSRFGuard properties file. CSRFGuard will search for the properties file specified by searching the following locations in order of appearance: the application's classpath, a directory accessible by the container, or an arbitrary absolute path. The Owasp.CsrfGuard.Config.Print parameter is optional and simply instructs CSRFGuard to display the parsed properties to the application server log file. Finally, we declare and enable the CSRFGuard HttpSessionListener with a class name of org.owasp.csrfguard.CsrfGuardListener. The CsrfGuardListener class is responsible for consuming context parameters and initializing CsrfGuard context for all newly created HttpSessions.
-Now that we have the CsrfGuard context initialization facilities in place, we'll need to declare and map the enforcement mechanism: CsrfGuardFilter. CsrfGuardFilter is responsible for facilitating the integration of the CsrfGuard object and associated token verification logic within the JavaEE web application. The following web.xml snippet was extracted from the [https://github.com/esheri3/OWASP-CSRFGuard/tree/master/Owasp.CsrfGuard.Test Owasp.CsrfGuard.Test] web application:
+Now that we have the CsrfGuard context initialization facilities in place, we'll need to declare and map the enforcement mechanism: CsrfGuardFilter. CsrfGuardFilter is responsible for facilitating the integration of the CsrfGuard object and associated token verification logic within the JavaEE web application. The following web.xml snippet was extracted from the [https://github.com/aramrami/OWASP-CSRFGuard/tree/master/Owasp.CsrfGuard.Test Owasp.CsrfGuard.Test] web application:
@@ Line 41: / Line 41: @@
   	</filter-mapping>
-We create a filter with the name of CSRFGuard and specify a classname of org.owasp.csrfguard.CsrfGuardFilter. At this point, we need to mapp the CSRFGuard Filter to all resources that we want to protect from attack. The following web.xml snippet was extracted from the [https://github.com/esheri3/OWASP-CSRFGuard/tree/master/Owasp.CsrfGuard.Test Owasp.CsrfGuard.Test] web application:
+We create a filter with the name of CSRFGuard and specify a classname of org.owasp.csrfguard.CsrfGuardFilter. At this point, we need to mapp the CSRFGuard Filter to all resources that we want to protect from attack. The following web.xml snippet was extracted from the [https://github.com/aramrami/OWASP-CSRFGuard/tree/master/Owasp.CsrfGuard.Test Owasp.CsrfGuard.Test] web application:
   	<filter-mapping>

@@ Line 17: / Line 17: @@
               <listener-class>org.owasp.csrfguard.CsrfGuardHttpSessionListener</listener-class>
          </listener>
          <context-param>
                <param-name>Owasp.CsrfGuard.Config</param-name>
@@ Line 34: / Line 30: @@
 Now that we have the CsrfGuard context initialization facilities in place, we'll need to declare and map the enforcement mechanism: CsrfGuardFilter. CsrfGuardFilter is responsible for facilitating the integration of the CsrfGuard object and associated token verification logic within the JavaEE web application. The following web.xml snippet was extracted from the [https://github.com/esheri3/OWASP-CSRFGuard/tree/master/Owasp.CsrfGuard.Test Owasp.CsrfGuard.Test] web application:
   	<filter>

@@ Line 25: / Line 25: @@
                <param-value>WEB-INF/Owasp.CsrfGuard.properties</param-value>
          </context-param>
          <context-param>
                <param-name>Owasp.CsrfGuard.Config.Print</param-name>

@@ Line 11: / Line 11: @@
 After placing Owasp.CsrfGuard.jar in your application's classpath, you'll need to declare CsrfGuard context parameters along with a HttpSessionListener and a Filter. The following web.xml snippet was extracted from the [https://github.com/aramrami/OWASP-CSRFGuard/tree/master/Owasp.CsrfGuard.Test Owasp.CsrfGuard.Test] web application:
-	 	<filter>
+        <listener>
- 		<filter-name>CSRFGuard</filter-name>
+             <listener-class>org.owasp.csrfguard.CsrfGuardServletContextListener</listener-class>
- 		<filter-class>org.owasp.csrfguard.CsrfGuardFilter</filter-class>
+        </listener>
- 	</filter>
+        <listener>
- 	<filter-mapping>
+             <listener-class>org.owasp.csrfguard.CsrfGuardHttpSessionListener</listener-class>
- 		<filter-name>CSRFGuard</filter-name>
+        </listener>
- 		<url-pattern>/*</url-pattern>
+        <filter>
- 	</filter-mapping>
+              <filter-name>CSRFGuard</filter-name>