OWASP/www-project-csrfguard · Discussions · GitHub

Discussions

You must be logged in to vote

migration from 3.1 to 4.5

Ethan47345 asked Jul 29, 2025 in Q&A · Answered

1
You must be logged in to vote

v4.3.0 | In memory Token saving with no clean up leading to High Heap utilization and thus crashing JVM

Shishir53 asked Jul 8, 2025 in Q&A · Unanswered

1
You must be logged in to vote

About Fetch API Support in OWASP CSRFGuard

hk2525 asked Jul 15, 2025 in Q&A · Unanswered

0
You must be logged in to vote

OWASP CsrfGuard token missing while submitting multipart formdata

yamahiro2 asked Apr 4, 2025 in Q&A · Unanswered

0
You must be logged in to vote

How is JavascriptServlet browser caching supposed to work?

bpapez asked Feb 4, 2022 in Q&A · Answered

2
You must be logged in to vote

Master csrf token incorrectly returned as page token

musaka872 asked Mar 27, 2024 in Q&A · Unanswered

2
You must be logged in to vote

Java 17 Compatibility with csrfguard-4.1.4

pcwd111 asked Apr 26, 2023 in Q&A · Answered

4
You must be logged in to vote

TokenName not sent in requestHeader.

prasjeku asked Dec 7, 2023 in Q&A · Answered

1
You must be logged in to vote

How to use it? Where do I find the documentation?

JackHewson asked Jun 17, 2023 in Q&A · Answered

1
You must be logged in to vote

csrfguard.js correct way to config

Sabrinale asked Mar 28, 2023 in Q&A · Answered

1
You must be logged in to vote

Usage of XMLHttpRequest in a WebComponent with Google Polymer 1.x

eitch asked Mar 28, 2023 in Q&A · Answered

1
You must be logged in to vote

Change in the JavaScriptServlet doPost() logic in 4.1.1 from 3.1.0

crkharan asked Jan 7, 2022 in Q&A · Answered

6
You must be logged in to vote

CSRFGuard server startup failure issue due to java.lang.UnsupportedClassVersionError: ch/qos/logback/classic/spi/LogbackServiceProvider

vinayakcc asked Oct 7, 2022 in Q&A · Answered

3
You must be logged in to vote

JavaScriptServlet causing noise in various bug bounty programs

kwwall asked Dec 14, 2022 in Q&A · Answered

2
You must be logged in to vote

Does csrfguard support multiple web servers in load balancing environment?

sumaharjan asked Oct 31, 2022 in Q&A · Answered

1
You must be logged in to vote

error:The token should exist in the storage at this point

nxsmcaspani asked Oct 25, 2022 in Q&A · Answered

1
You must be logged in to vote

Can logger property still be used in version above 4.0.0?

itachiuchihamadara asked Jul 19, 2022 in Q&A · Answered

3
You must be logged in to vote

CsrfGuard.getSessionKey() replacement?

rdifrango asked May 19, 2022 in Q&A · Answered

8
You must be logged in to vote

retrieving tokens from TokenHolder interface

itachiuchihamadara asked Apr 30, 2022 in Q&A · Answered

3
You must be logged in to vote

How can I commit into main repo.

lav023 asked Apr 4, 2022 in Q&A · Answered

1
You must be logged in to vote

NewTokenLandingPage redirect is a POST?

LPmaverick asked Mar 14, 2022 in Q&A · Answered

6
You must be logged in to vote

Difference between 3.1.0 and 4.1.0 with respect to where the token is saved in the container

deepak229 asked Dec 22, 2021 in Q&A · Answered

1
You must be logged in to vote

Query | CVE-2021-44228 impact
duplicate This issue or pull request already exists
mksingh510 asked Dec 15, 2021 in Q&A · Answered

2
You must be logged in to vote

Impacted jars by Apache Log4j Tool : Zero Day in Ubiquitous Under Active Attack (CVE-2021-44228) ??

Sanjay122021 asked Dec 14, 2021 in Q&A · Answered

1
You must be logged in to vote

using csrfGuard without SessionTokenKeyExtractor

ACM-Unit asked Nov 30, 2021 in Q&A · Answered

1