[Owasp-csrfguard] Owasp-csrfguard Digest, Vol 19, Issue 6

Patrick Radtke pradtke at stanford.edu
Mon Jan 30 21:29:16 UTC 2012


On 1/30/12 1:19 PM, Manish Sharma wrote:
> Hi,
>
> I am new to CSRF Guard, and I am getting some jasper exception when I am
> using csrf tag. Actually I am passing a value of uri at runtime by using
> expression tag and I am getting the following exception
>
> "According to TLD or attribute directive in tag file, attribute uri does
> not accept any expressions"
>
> I am trying this.
>
> <a href="<%=link%><csrf:token uri="<%=pageUri %>"/>"/><fmt:message
> key="<%=resourceCode%>"/></a>
>
> Please help me out how can I get it working.
>
> Thanks
> Manish Kumar

You'll need to download the src from github. Allowing EL expressions in 
the URI was fixed (commit 3dd56d110aedf6463cfd68a82d0d34b4ad4100bb) a 
while back but isn't available in a precompiled .jar

-Patrick


More information about the Owasp-csrfguard mailing list