Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread Vijaya Kumar
>> André Warnier 11/16/2012 3:31 PM >>> Vijaya Kumar wrote: > Hi, > I work on a web application that is vulnerable to CSRF(Cross Site Request > Forgery) attack. Tomcat 7 has a CSRF prevention filter. I went through the > description to configure this filter.

Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread Vijaya Kumar
Hi, I work on a web application that is vulnerable to CSRF(Cross Site Request Forgery) attack. Tomcat 7 has a CSRF prevention filter. I went through the description to configure this filter. This filter expects that we call HttpServletResponse#encodeRedirectURL(String) or HttpServletResponse#