[Esapi-user] CSRF JSF solutions

Chris Schmidt chrisisbeef at gmail.com
Mon Mar 21 18:57:06 EDT 2011


Hi Sebastian - I am curious as to what kinds of issues you encountered when
trying to get CSRFGuard to work with JSF. I have also included Eric Sheridan
on this email, the maintainer of the CSRFGuard project.

-----Original Message-----
From: esapi-user-bounces at lists.owasp.org
[mailto:esapi-user-bounces at lists.owasp.org] On Behalf Of Sebastian
Sent: Monday, March 21, 2011 8:00 AM
To: esapi-user at lists.owasp.org
Subject: [Esapi-user] CSRF JSF solutions

Hi, some days ago i tried to configure CSRFGuard in a JSF proyect but i
couldn't do it successfully. So i found another solution here
http://blog.eisele.net/2011/02/preventing-csrf-with-jsf-20.html

It is much simpler than CSRFGuard, it hasn't advanced configuration options
but it seems to works fine!!

Cheers,
Sebastián
_______________________________________________
Esapi-user mailing list
Esapi-user at lists.owasp.org
https://lists.owasp.org/mailman/listinfo/esapi-user



More information about the Esapi-user mailing list