[Owasp-csrfguard] Location of the configuration files

Jasmin Amidzic jasminsabina at yahoo.com
Fri May 9 02:30:08 UTC 2014


Thanks Chris. 
    Just looking at the source  code. What do you think, should it be possible to extend ConfigurationOverlayProvider and create ConfigurationOverlayJNDIProvider, which obtainins location, path to the configuration file from a JNDI property?


Thanks Jasmin


  
On Friday, 9 May 2014 12:09 PM, Chris Hyzer <mchyzer at isc.upenn.edu> wrote:
 
It doesn’t cover that use case (from JNDI), but you can have a file on the filesystem not on the classpath:
 
Have the Owasp.CsrfGuard.properties that has all the defaults in the classpath.  Then have the Owasp.CsrfGuard.overlay.properties on the classpath that has an entry that says which files to look at in which order.  First the Owasp.CsrfGuard.properties on the classpath, then some file on the file system file:/opt/whatever/csrfguard/conf/Owasp.CsrfGuard.server.properties, something like that.
 
You can configure as many overlays as you want.  i.e. you can have a base config, an overlay for the application, and another overlay for the environment of the application.   However you want to organize it. 
 
Thanks,
Chris
 
 
From:owasp-csrfguard-bounces at lists.owasp.org [mailto:owasp-csrfguard-bounces at lists.owasp.org] On Behalf Of Jasmin Amidzic
Sent: Thursday, May 08, 2014 9:21 PM
To: owasp-csrfguard at lists.owasp.org
Subject: [Owasp-csrfguard] Location of the configuration files
 
Hi, 
    I would like to read configuration files,  Owasp.CsrfGuard.properties and  Owasp.CsrfGuard.overlay.properties,  from a location on a application server instead of reading them from the classpath. Ideally, the information about location of the files would come from a JNDI entry on the app server.
I did some search 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-csrfguard/attachments/20140508/43ead181/attachment.html>


More information about the Owasp-csrfguard mailing list