public final class CsrfGuard extends Object
| Modifier and Type | Field and Description |
|---|---|
static String |
PAGE_TOKENS_KEY |
| Constructor and Description |
|---|
CsrfGuard() |
| Modifier and Type | Method and Description |
|---|---|
List<IAction> |
getActions() |
static CsrfGuard |
getInstance() |
ILogger |
getLogger() |
String |
getNewTokenLandingPage() |
SecureRandom |
getPrng() |
Set<String> |
getProtectedMethods() |
Set<String> |
getProtectedPages() |
String |
getSessionKey() |
int |
getTokenLength() |
String |
getTokenName() |
String |
getTokenValue(javax.servlet.http.HttpServletRequest request) |
String |
getTokenValue(javax.servlet.http.HttpServletRequest request,
String uri) |
Set<String> |
getUnprotectedPages() |
boolean |
isAjaxEnabled() |
boolean |
isProtectedMethod(String method) |
boolean |
isProtectedPage(String uri) |
boolean |
isProtectedPageAndMethod(javax.servlet.http.HttpServletRequest request) |
boolean |
isProtectedPageAndMethod(String page,
String method) |
boolean |
isProtectEnabled() |
boolean |
isRotateEnabled() |
boolean |
isTokenPerPageEnabled() |
boolean |
isTokenPerPagePrecreate() |
boolean |
isUseNewTokenLandingPage() |
boolean |
isValidRequest(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response) |
static void |
load(Properties properties) |
void |
setProtect(boolean protect) |
String |
toString() |
void |
updateToken(javax.servlet.http.HttpSession session) |
void |
updateTokens(javax.servlet.http.HttpServletRequest request) |
void |
writeLandingPage(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response) |
public static final String PAGE_TOKENS_KEY
public static CsrfGuard getInstance()
public static void load(Properties properties) throws NoSuchAlgorithmException, InstantiationException, IllegalAccessException, ClassNotFoundException, IOException, NoSuchProviderException
public ILogger getLogger()
public String getTokenName()
public int getTokenLength()
public boolean isRotateEnabled()
public boolean isTokenPerPageEnabled()
public boolean isTokenPerPagePrecreate()
public SecureRandom getPrng()
public String getNewTokenLandingPage()
public boolean isUseNewTokenLandingPage()
public boolean isAjaxEnabled()
public boolean isProtectEnabled()
public void setProtect(boolean protect)
public String getSessionKey()
public String getTokenValue(javax.servlet.http.HttpServletRequest request)
public String getTokenValue(javax.servlet.http.HttpServletRequest request, String uri)
public boolean isValidRequest(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response)
public void updateToken(javax.servlet.http.HttpSession session)
public void updateTokens(javax.servlet.http.HttpServletRequest request)
public void writeLandingPage(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response)
throws IOException
IOExceptionpublic boolean isProtectedPage(String uri)
public boolean isProtectedMethod(String method)
public boolean isProtectedPageAndMethod(javax.servlet.http.HttpServletRequest request)
Copyright © 2013 OWASP. All Rights Reserved.