Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread Vijaya Kumar
Hi, I work on a web application that is vulnerable to CSRF(Cross Site Request Forgery) attack. Tomcat 7 has a CSRF prevention filter. I went through the description to configure this filter. This filter expects that we call HttpServletResponse#encodeRedirectURL(String) or

Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread Vijaya Kumar
Warniera...@ice-sa.com 11/16/2012 3:31 PM Vijaya Kumar wrote: Hi, I work on a web application that is vulnerable to CSRF(Cross Site Request Forgery) attack. Tomcat 7 has a CSRF prevention filter. I went through the description to configure this filter. This filter expects that we call