A B C D E F G H I J L M N O P R S T U V W X

A

AbstractAction - Class in org.owasp.csrfguard.action

AbstractAction() - Constructor for class org.owasp.csrfguard.action.AbstractAction

ACTION_ATTRIBUTE_NAME - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

ACTION_PREFIX - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

addResponseTokenHeader(CsrfGuard, HttpServletRequest, HttpServletResponse, TokenTO) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils

AJAX_ENABLED - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

append(String, boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, boolean[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, boolean[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, byte) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, byte[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, byte[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, char) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, char[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, char[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, double) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, double[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, double[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, float) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, float[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, float[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, int) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, int[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, int[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, long) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, long[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, long[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, Object) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, Object, boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, Object[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, Object[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, short) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, short[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

append(String, short[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

areTokensGenerated() - Method in interface org.owasp.csrfguard.session.LogicalSession

B

BANNED_USER_AGENT_PROPERTIES_PREFIX - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

BooleanJsConfigParameter - Class in org.owasp.csrfguard.config.properties.javascript

BooleanJsConfigParameter(String, String, boolean) - Constructor for class org.owasp.csrfguard.config.properties.javascript.BooleanJsConfigParameter

BrowserEncoder - Class in org.owasp.csrfguard.util

bytesToHex(byte[]) - Static method in class org.owasp.csrfguard.util.ConvertUtil

C

CACHE_CONTROL - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

CACHE_CONTROL_TAGGED - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

checkForEvictions(boolean) - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache

check and remove elements that are stale

classLoader() - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

fast class loader

className(Object) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

null safe classname method, gets the unenhanced name

clear() - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache

delete the cache

clearAll() - Static method in class org.owasp.csrfguard.config.overlay.ExpirableCache

clear out all caches everywhere (session, request, context, etc)

clone() - Method in class org.owasp.csrfguard.util.BrowserEncoder

clone() - Method in class org.owasp.csrfguard.util.RandomGenerator

closeQuietly(InputStream) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

Unconditionally close an InputStream.

commonSubstitutions(String) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils

Replaces percent-bounded expressions such as "%servletContext%."

computeUrl(String, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

compute a url of a resource

CONFIG_OVERLAY_HIERARCHY_PROPERTY_NAME - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

CONFIG_OVERLAY_UPDATE_CHECK_PROPERTY_NAME - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

CONFIG_PROVIDER_FACTORY_PROPERTY_NAME - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

ConfigFile(String) - Constructor for class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFile

ConfigParameters - Class in org.owasp.csrfguard.config.properties

ConfigPropertiesCascadeBase - Class in org.owasp.csrfguard.config.overlay

Base class for a cascaded config.

ConfigPropertiesCascadeBase() - Constructor for class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

ConfigPropertiesCascadeBase.ConfigFile - Class in org.owasp.csrfguard.config.overlay

ConfigPropertiesCascadeBase.ConfigFileType - Enum in org.owasp.csrfguard.config.overlay

config file type

ConfigPropertiesCascadeCommonUtils - Class in org.owasp.csrfguard.config.overlay

utility methods for grouper.

ConfigPropertiesCascadeCommonUtils() - Constructor for class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

ConfigPropertiesCascadeUtils - Class in org.owasp.csrfguard.config.overlay

utility methods specific to grouper client

ConfigPropertiesCascadeUtils() - Constructor for class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeUtils

ConfigurationAutodetectProviderFactory - Class in org.owasp.csrfguard.config.overlay

The default configuration provider is: ConfigurationAutodetectProviderFactory which will look for an overlay file, it is there, and the factory inside that file is set it will use it, otherwise will be PropertiesConfigurationProviderFactory it needs to implement ConfigurationProviderFactory

ConfigurationAutodetectProviderFactory() - Constructor for class org.owasp.csrfguard.config.overlay.ConfigurationAutodetectProviderFactory

TODO document

ConfigurationOverlayProvider - Class in org.owasp.csrfguard.config.overlay

Use configuration overlays that use the base properties as a default, and then decorate with an overlay file

ConfigurationOverlayProvider() - Constructor for class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider

ConfigurationOverlayProviderFactory - Class in org.owasp.csrfguard.config.overlay

TODO document

ConfigurationOverlayProviderFactory() - Constructor for class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProviderFactory

TODO document

ConfigurationProvider - Interface in org.owasp.csrfguard.config

Interface that enables interaction with configuration providers

ConfigurationProviderFactory - Interface in org.owasp.csrfguard.config

implement this interface to provide the configuration

contextDestroyed(ServletContextEvent) - Method in class org.owasp.csrfguard.CsrfGuardServletContextListener

contextInitialized(ServletContextEvent) - Method in class org.owasp.csrfguard.CsrfGuardServletContextListener

ConvertUtil - Class in org.owasp.csrfguard.util

ConvertUtil() - Constructor for class org.owasp.csrfguard.util.ConvertUtil

copy(InputStream, Writer, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

Copy and convert bytes from an InputStream to chars on a Writer, using the specified encoding.

copy(Reader, Writer) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

Copy chars from a Reader to a Writer.

createMasterTokenIfAbsent(String) - Method in class org.owasp.csrfguard.token.service.TokenService

Creates master token if it does not exist already.

createMasterTokenIfAbsent(String, Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder

createMasterTokenIfAbsent(String, Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder

Creates and returns a new master token bound to the provided session key if there wasn't any or returns the existing value.

createPageTokenIfAbsent(String, String, Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder

createPageTokenIfAbsent(String, String, Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder

Creates and returns a new page token bound to the provided resource URI and mapped to the session key if there wasn't any or returns the existing value.

CsrfGuard - Class in org.owasp.csrfguard

CSRFGUARD_ENABLED - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

CSRFGUARD_PROTECT - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

CsrfGuardException - Exception in org.owasp.csrfguard

CsrfGuardException(String) - Constructor for exception org.owasp.csrfguard.CsrfGuardException

CsrfGuardException(Exception) - Constructor for exception org.owasp.csrfguard.CsrfGuardException

CsrfGuardException(String, Exception) - Constructor for exception org.owasp.csrfguard.CsrfGuardException

CsrfGuardFilter - Class in org.owasp.csrfguard

CsrfGuardFilter() - Constructor for class org.owasp.csrfguard.CsrfGuardFilter

CsrfGuardPropertiesToStringBuilder - Class in org.owasp.csrfguard.util

CsrfGuardPropertiesToStringBuilder(Object) - Constructor for class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

CsrfGuardServletContextListener - Class in org.owasp.csrfguard

CsrfGuardServletContextListener() - Constructor for class org.owasp.csrfguard.CsrfGuardServletContextListener

CSRFGuardTokenException - Exception in org.owasp.csrfguard.exception

CSRFGuardTokenException - Runtime Exception handling all token related errors.

CSRFGuardTokenException(String) - Constructor for exception org.owasp.csrfguard.exception.CSRFGuardTokenException

CSRFGuardTokenException(String, Throwable) - Constructor for exception org.owasp.csrfguard.exception.CSRFGuardTokenException

CSRFGuardTokenException(Throwable) - Constructor for exception org.owasp.csrfguard.exception.CSRFGuardTokenException

CsrfGuardUtils - Class in org.owasp.csrfguard.util

Various utility methods/helpers.

CsrfValidator - Class in org.owasp.csrfguard

CsrfValidator() - Constructor for class org.owasp.csrfguard.CsrfValidator

D

DEFAULT_BUFFER_SIZE - Static variable in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

The name says it all.

DEFAULT_PRNG - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

DEFAULT_REFERER_PATTERN - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

defaultString(String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

Returns either the passed in String, or if the String is null, an empty String ("").

defaultTimeToLiveMillis(int) - Method in enum org.owasp.csrfguard.config.overlay.ExpirableCache.ExpirableCacheUnit

default time to live based on units

destroy() - Method in class org.owasp.csrfguard.CsrfGuardFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.owasp.csrfguard.CsrfGuardFilter

doGet(HttpServletRequest, HttpServletResponse) - Method in class org.owasp.csrfguard.servlet.JavaScriptServlet

DOMAIN_ORIGIN - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

DOMAIN_STRICT - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

doPost(HttpServletRequest, HttpServletResponse) - Method in class org.owasp.csrfguard.servlet.JavaScriptServlet

DYNAMIC_NODE_CREATION_EVENT_NAME - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

E

Empty - Class in org.owasp.csrfguard.action

TODO document or why it is needed or remove this Action

Empty() - Constructor for class org.owasp.csrfguard.action.Empty

EMPTY_STRING_ARRAY - Static variable in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

An empty immutable String array.

encodeForAttribute(String) - Static method in class org.owasp.csrfguard.util.BrowserEncoder

encodeForHtml(String) - Static method in class org.owasp.csrfguard.util.BrowserEncoder

enumValueOfIgnoreCase(Class<E>, String, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

do a case-insensitive matching

equals(String, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

null safe string compare

equalsIgnoreCase(String, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

null-safe equalsignorecase

Error - Class in org.owasp.csrfguard.action

Error() - Constructor for class org.owasp.csrfguard.action.Error

execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Empty

execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Error

execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Forward

execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in interface org.owasp.csrfguard.action.IAction

Executes this action.

execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Invalidate

execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Log

execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Redirect

execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.RequestAttribute

execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Rotate

ExpirableCache<K,V> - Class in org.owasp.csrfguard.config.overlay

This is like a map, but the setters also take an expire time which will mean the items in the cache will be automatically deleted.

ExpirableCache() - Constructor for class org.owasp.csrfguard.config.overlay.ExpirableCache

ExpirableCache(int) - Constructor for class org.owasp.csrfguard.config.overlay.ExpirableCache

ExpirableCache(ExpirableCache.ExpirableCacheUnit, int) - Constructor for class org.owasp.csrfguard.config.overlay.ExpirableCache

ExpirableCache.ExpirableCacheUnit - Enum in org.owasp.csrfguard.config.overlay

unit of time for expirable cache

ExpirableValue<T> - Class in org.owasp.csrfguard.config.overlay

This holds the actual value of the map, and the time it was inserted, and the time that it should last in the cache

extract(HttpServletRequest) - Method in interface org.owasp.csrfguard.token.storage.LogicalSessionExtractor

Returns a logical session implementation based on the information extracted from the current HTTP request or null if that was not possible

extractOrCreate(HttpServletRequest) - Method in interface org.owasp.csrfguard.token.storage.LogicalSessionExtractor

Returns a logical session implementation based on the information extracted from the current HTTP request or creates a new one

F

fileCanonicalPath(File) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

get canonical path of file

filesNeedReloadingBasedOnContents() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

FORCE_SYNCHRONOUS_AJAX - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

forName(String) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils

Returns the class object.

Forward - Class in org.owasp.csrfguard.action

Forward() - Constructor for class org.owasp.csrfguard.action.Forward

from(String) - Static method in class org.owasp.csrfguard.token.storage.impl.PageTokenValue

from(String, LocalDateTime) - Static method in class org.owasp.csrfguard.token.storage.impl.PageTokenValue

G

generateProtectedPageTokens(String) - Method in class org.owasp.csrfguard.token.service.TokenService

Generates new random tokens for configured protected pages.

generateRandomId(String, String, int) - Static method in class org.owasp.csrfguard.util.RandomGenerator

generateRandomId(SecureRandom, int) - Static method in class org.owasp.csrfguard.util.RandomGenerator

generateRandomToken() - Static method in class org.owasp.csrfguard.token.TokenUtils

Create a random token based on the configuration.

generateTokensIfAbsent(String, String, String) - Method in class org.owasp.csrfguard.token.service.TokenService

Generates master token and page token for the current resource if the token-per-page configuration is enabled

get(K) - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache

get a value or null if not there or expired this will check for eviction, and evict if evictable

getActions() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getActions() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getActions() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getActions() - Method in class org.owasp.csrfguard.CsrfGuard

getAttribute(String) - Method in interface org.owasp.csrfguard.session.LogicalSession

Retrieves an object from the session using its name

getBannedUserAgentProperties() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getBannedUserAgentProperties() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getBannedUserAgentProperties() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getBannedUserAgentProperties() - Method in class org.owasp.csrfguard.CsrfGuard

getCacheEvictions() - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache

number of items evicted from cache

getCacheHits() - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache

number of items successfully retrieved from cache

getCacheInserts() - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache

number of items inserted into the cache

getClassInSiblingJar() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

if it's ok to put the config file in the same directory as a jar, then return a class in the jar here

getConfigFileName() - Static method in class org.owasp.csrfguard.CsrfGuardServletContextListener

config file name if specified in the web.xml

getContents() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFile

the contents when the config file was read

getCreationTime() - Method in class org.owasp.csrfguard.token.storage.impl.PageTokenValue

getDefaultTimeToLiveInMillis() - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache

expose the length of cache

getDefaultValue() - Method in class org.owasp.csrfguard.config.properties.SimpleBooleanConfigParameter

getDefaultValue() - Method in interface org.owasp.csrfguard.config.properties.SimpleConfigParameter

getDefaultValue() - Method in class org.owasp.csrfguard.config.properties.SimpleDurationParameter

getDefaultValue() - Method in class org.owasp.csrfguard.config.properties.SimpleIntConfigParameter

getDomainOrigin() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

TODO Currently not configurable through the properties!

getDomainOrigin() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getDomainOrigin() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getDomainOrigin() - Method in class org.owasp.csrfguard.CsrfGuard

getHierarchyConfigKey() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

config key of the hierarchy value

getHierarchyConfigKey() - Method in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider

getInitParameter(ServletConfig, String, String, String) - Static method in class org.owasp.csrfguard.config.properties.javascript.JsConfigParameter

getInitParameter(ServletConfig, String, String, boolean) - Static method in class org.owasp.csrfguard.config.properties.javascript.JsConfigParameter

getInitParameter(ServletConfig, String, String, T, Function<String, T>) - Static method in class org.owasp.csrfguard.config.properties.javascript.JsConfigParameter

getInstance() - Static method in class org.owasp.csrfguard.CsrfGuard

getJavascriptCacheControl() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getJavascriptCacheControl() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getJavascriptCacheControl() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getJavascriptCacheControl() - Method in class org.owasp.csrfguard.CsrfGuard

getJavascriptDynamicNodeCreationEventName() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getJavascriptDynamicNodeCreationEventName() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getJavascriptDynamicNodeCreationEventName() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getJavascriptDynamicNodeCreationEventName() - Method in class org.owasp.csrfguard.CsrfGuard

getJavaScriptEtag(HttpServletRequest) - Static method in class org.owasp.csrfguard.servlet.JavaScriptServlet

getJavascriptRefererPattern() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getJavascriptRefererPattern() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getJavascriptRefererPattern() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getJavascriptRefererPattern() - Method in class org.owasp.csrfguard.CsrfGuard

getJavascriptTaggedCacheControl() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getJavascriptTaggedCacheControl() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getJavascriptTaggedCacheControl() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getJavascriptTaggedCacheControl() - Method in class org.owasp.csrfguard.CsrfGuard

getJavascriptTemplateCode() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getJavascriptTemplateCode() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getJavascriptTemplateCode() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getJavascriptTemplateCode() - Method in class org.owasp.csrfguard.CsrfGuard

getJavascriptUnprotectedExtensions() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

example: "js,css,gif,png,ico,jpg"

getJavascriptUnprotectedExtensions() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getJavascriptUnprotectedExtensions() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getJavascriptUnprotectedExtensions() - Method in class org.owasp.csrfguard.CsrfGuard

getJavascriptUris() - Static method in class org.owasp.csrfguard.servlet.JavaScriptServlet

whitelist the javascript servlet from csrf errors

getJavascriptXrequestedWith() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

TODO document

getJavascriptXrequestedWith() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getJavascriptXrequestedWith() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getJavascriptXrequestedWith() - Method in class org.owasp.csrfguard.CsrfGuard

getKey() - Method in interface org.owasp.csrfguard.session.LogicalSession

Returns the logical session key

getLogicalSessionExtractor() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getLogicalSessionExtractor() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getLogicalSessionExtractor() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getLogicalSessionExtractor() - Method in class org.owasp.csrfguard.CsrfGuard

getMainConfigClasspath() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

get the main config classpath, e.g. csrf guard properties

getMainConfigClasspath() - Method in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider

getMainExampleConfigClasspath() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

get the example config classpath, e.g. csrf guard base properties

getMainExampleConfigClasspath() - Method in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider

getMasterToken(String) - Method in class org.owasp.csrfguard.token.service.TokenService

Returns the master token assigned to the unique identifier extracted from the current request.

getMasterToken() - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken

getMasterToken() - Method in interface org.owasp.csrfguard.token.storage.Token

Returns the master token

getName() - Method in class org.owasp.csrfguard.action.AbstractAction

getName() - Method in interface org.owasp.csrfguard.action.IAction

getName() - Method in class org.owasp.csrfguard.config.properties.SimpleBooleanConfigParameter

getName() - Method in interface org.owasp.csrfguard.config.properties.SimpleConfigParameter

getName() - Method in class org.owasp.csrfguard.config.properties.SimpleDurationParameter

getName() - Method in class org.owasp.csrfguard.config.properties.SimpleIntConfigParameter

getNewTokenLandingPage() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getNewTokenLandingPage() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getNewTokenLandingPage() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getNewTokenLandingPage() - Method in class org.owasp.csrfguard.CsrfGuard

getPageToken(String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken

getPageToken(String, String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder

getPageToken(String) - Method in interface org.owasp.csrfguard.token.storage.Token

getPageToken(String, String) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder

Returns the page token based on the desired HTTP resource URI and logical session key

getPageTokens(String) - Method in class org.owasp.csrfguard.token.service.TokenService

Return the page tokens if the functionality is enabled and the client has already accessed a protected resource, or if the token pre-creation is enabled.

getPageTokens() - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken

getPageTokens(String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder

getPageTokens() - Method in interface org.owasp.csrfguard.token.storage.Token

getPageTokens(String) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder

Returns all page tokens associated to the provided logical session key

getPageTokenSynchronizationTolerance() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getPageTokenSynchronizationTolerance() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getPageTokenSynchronizationTolerance() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getPageTokenSynchronizationTolerance() - Method in class org.owasp.csrfguard.CsrfGuard

getParameter(String) - Method in class org.owasp.csrfguard.action.AbstractAction

getParameter(String) - Method in interface org.owasp.csrfguard.action.IAction

getParameterMap() - Method in class org.owasp.csrfguard.action.AbstractAction

getParameterMap() - Method in interface org.owasp.csrfguard.action.IAction

getPrng() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getPrng() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getPrng() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getPrng() - Method in class org.owasp.csrfguard.CsrfGuard

getProperty(ServletConfig, Properties) - Method in class org.owasp.csrfguard.config.properties.javascript.BooleanJsConfigParameter

getProperty(ServletConfig, Properties) - Method in class org.owasp.csrfguard.config.properties.javascript.JsConfigParameter

getProperty(ServletConfig, Properties) - Method in class org.owasp.csrfguard.config.properties.javascript.StringJsConfigParameter

getProperty(Properties, String) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils

property string and substitutions

getProperty(Properties, Pair<String, String>) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils

getProperty(Properties, SimpleIntConfigParameter) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils

getProperty(Properties, SimpleBooleanConfigParameter) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils

getProperty(Properties, SimpleConfigParameter<T>, Function<String, T>) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils

getProperty(Properties, SimpleDurationParameter) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils

getProperty(Properties, String, T, Function<String, T>) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils

getProperty(Properties, String, String) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils

property string and substitutions

getProtectedMethods() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getProtectedMethods() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getProtectedMethods() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getProtectedMethods() - Method in class org.owasp.csrfguard.CsrfGuard

getProtectedPages() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getProtectedPages() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getProtectedPages() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getProtectedPages() - Method in class org.owasp.csrfguard.CsrfGuard

getRegexPatternCache() - Method in class org.owasp.csrfguard.CsrfGuard

getResourceIdentifier() - Method in class org.owasp.csrfguard.ProtectionResult

getSecondsToCheckConfigKey() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

config key of the time in seconds to check config

getSecondsToCheckConfigKey() - Method in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider

getServletContext() - Static method in class org.owasp.csrfguard.CsrfGuardServletContextListener

servlet context (will be the empty string if it is / )

getStaticServletConfig() - Static method in class org.owasp.csrfguard.servlet.JavaScriptServlet

getTimedPageToken(String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken

getTimedPageToken(String) - Method in interface org.owasp.csrfguard.token.storage.Token

getTimeToCheckConfigSeconds() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

when we build the config object, get the time to check config in seconds

getToken(String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder

getToken(String) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder

Returns the master and page tokens associated to a logical session key

getTokenHolder() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getTokenHolder() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getTokenHolder() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getTokenHolder() - Method in class org.owasp.csrfguard.CsrfGuard

getTokenLength() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

This parameter controls how long a generated token should be.

getTokenLength() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getTokenLength() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getTokenLength() - Method in class org.owasp.csrfguard.CsrfGuard

getTokenName() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getTokenName() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getTokenName() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getTokenName() - Method in class org.owasp.csrfguard.CsrfGuard

getTokenService() - Method in class org.owasp.csrfguard.CsrfGuard

getTokenValue(String, String) - Method in class org.owasp.csrfguard.token.service.TokenService

Returns the master or the page token for the associated resource depending on whether the token-per-page configuration is enabled or not.

getUnprotectedMethods() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

if there are methods here, then all other HTTP methods are protected and these (e.g.

getUnprotectedMethods() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getUnprotectedMethods() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getUnprotectedMethods() - Method in class org.owasp.csrfguard.CsrfGuard

if there are methods specified, then they (e.g.

getUnprotectedPages() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

getUnprotectedPages() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

getUnprotectedPages() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

getUnprotectedPages() - Method in class org.owasp.csrfguard.CsrfGuard

getUpdatedMasterToken() - Method in class org.owasp.csrfguard.token.businessobject.TokenBO

getUpdatedPageTokens() - Method in class org.owasp.csrfguard.token.businessobject.TokenBO

getUseNewTokenLandingPage(String) - Static method in class org.owasp.csrfguard.config.properties.ConfigParameters

getValue() - Method in class org.owasp.csrfguard.token.storage.impl.PageTokenValue

H

HttpMethod - Enum in org.owasp.csrfguard.config.properties

httpProtocolAndDomain(String, boolean) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils

for a url, get the protocol and domain, e.g. for url https://a.b/path, will return https://a.b

I

IAction - Interface in org.owasp.csrfguard.action

Interface enabling interaction with Actions, that are invoked in case of a potential CSRF attack

init(FilterConfig) - Method in class org.owasp.csrfguard.CsrfGuardFilter

init(ServletConfig) - Method in class org.owasp.csrfguard.servlet.JavaScriptServlet

initializeJavaScriptConfiguration() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

JavaScript configuration parameters can be set/overwritten via the servlet configuration.

initializeJavaScriptConfiguration() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

initializeJavaScriptConfiguration() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

initializeJavaScriptConfiguration() - Method in class org.owasp.csrfguard.CsrfGuard

INJECT_FORM_ATTRIBUTES - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

INJECT_GET_FORMS - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

INJECT_INTO_ATTRIBUTES - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

INJECT_INTO_DYNAMICALLY_CREATED_NODES - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

INJECT_INTO_FORMS - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

InMemoryToken - Class in org.owasp.csrfguard.token.storage.impl

InMemoryToken(String) - Constructor for class org.owasp.csrfguard.token.storage.impl.InMemoryToken

InMemoryToken(String, Pair<String, String>) - Constructor for class org.owasp.csrfguard.token.storage.impl.InMemoryToken

InMemoryTokenHolder - Class in org.owasp.csrfguard.token.storage.impl

InMemoryTokenHolder() - Constructor for class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder

inputStream(String, ConfigPropertiesCascadeBase) - Method in enum org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFileType

get the inputstream to read the config

InterceptRedirectResponse - Class in org.owasp.csrfguard.http

InterceptRedirectResponse(HttpServletResponse, HttpServletRequest, CsrfGuard) - Constructor for class org.owasp.csrfguard.http.InterceptRedirectResponse

intValue(Object) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

convert an object to a int

Invalidate - Class in org.owasp.csrfguard.action

Invalidate() - Constructor for class org.owasp.csrfguard.action.Invalidate

invalidate() - Method in interface org.owasp.csrfguard.session.LogicalSession

Invalidates this session then unbinds any objects bound to it.

invalidate(LogicalSession) - Method in class org.owasp.csrfguard.token.service.TokenService

Invalidates the logical session and removes all tokens from the storage

isAjaxEnabled() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

isAjaxEnabled() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isAjaxEnabled() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isAjaxEnabled() - Method in class org.owasp.csrfguard.CsrfGuard

isAjaxRequest(HttpServletRequest) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils

isBlank(String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

Checks if a String is whitespace, empty ("") or null.

isCacheable() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

isCacheable() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isCacheable() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isEmpty() - Method in class org.owasp.csrfguard.token.transferobject.TokenTO

isEnabled() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

if the filter is enabled

isEnabled() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isEnabled() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isEnabled() - Method in class org.owasp.csrfguard.CsrfGuard

isForceSynchronousAjax() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

isForceSynchronousAjax() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isForceSynchronousAjax() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isForceSynchronousAjax() - Method in class org.owasp.csrfguard.CsrfGuard

isJavascriptDomainStrict() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

isJavascriptDomainStrict() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isJavascriptDomainStrict() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isJavascriptDomainStrict() - Method in class org.owasp.csrfguard.CsrfGuard

isJavascriptInjectFormAttributes() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

if the token should be injected in the action in forms note, if injectIntoForms is true, then this might not need to be true

isJavascriptInjectFormAttributes() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isJavascriptInjectFormAttributes() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isJavascriptInjectFormAttributes() - Method in class org.owasp.csrfguard.CsrfGuard

isJavascriptInjectGetForms() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

if the token should be injected in GET forms (which will be on the URL) if the HTTP method GET is unprotected, then this should likely be false

isJavascriptInjectGetForms() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isJavascriptInjectGetForms() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isJavascriptInjectGetForms() - Method in class org.owasp.csrfguard.CsrfGuard

isJavascriptInjectIntoAttributes() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

isJavascriptInjectIntoAttributes() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isJavascriptInjectIntoAttributes() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isJavascriptInjectIntoAttributes() - Method in class org.owasp.csrfguard.CsrfGuard

isJavascriptInjectIntoDynamicallyCreatedNodes() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

isJavascriptInjectIntoDynamicallyCreatedNodes() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isJavascriptInjectIntoDynamicallyCreatedNodes() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isJavascriptInjectIntoDynamicallyCreatedNodes() - Method in class org.owasp.csrfguard.CsrfGuard

isJavascriptInjectIntoForms() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

isJavascriptInjectIntoForms() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isJavascriptInjectIntoForms() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isJavascriptInjectIntoForms() - Method in class org.owasp.csrfguard.CsrfGuard

isJavascriptRefererMatchDomain() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

if the referer to the javascript must match domain

isJavascriptRefererMatchDomain() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isJavascriptRefererMatchDomain() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isJavascriptRefererMatchDomain() - Method in class org.owasp.csrfguard.CsrfGuard

isJavascriptRefererMatchProtocol() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

if the referer to the javascript must match the protocol of the domain

isJavascriptRefererMatchProtocol() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isJavascriptRefererMatchProtocol() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isJavascriptRefererMatchProtocol() - Method in class org.owasp.csrfguard.CsrfGuard

isNew() - Method in interface org.owasp.csrfguard.session.LogicalSession

Returns true if the client does not yet know about the session or if the client chooses not to join the session.

isPermittedUserAgent(HttpServletRequest, HttpServletResponse, CsrfGuard) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils

isPrintConfig() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

isPrintConfig() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isPrintConfig() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isPrintConfig() - Method in class org.owasp.csrfguard.CsrfGuard

isProtected() - Method in class org.owasp.csrfguard.ProtectionResult

isProtectedPage(String) - Method in class org.owasp.csrfguard.CsrfValidator

isProtectedPageAndMethod(String, String) - Method in class org.owasp.csrfguard.CsrfValidator

isProtectEnabled() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

The default behavior of CSRFGuard is to protect all pages.

isProtectEnabled() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isProtectEnabled() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isProtectEnabled() - Method in class org.owasp.csrfguard.CsrfGuard

isRotateEnabled() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

isRotateEnabled() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isRotateEnabled() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isRotateEnabled() - Method in class org.owasp.csrfguard.CsrfGuard

isRotateEnabled(HttpServletRequest) - Method in class org.owasp.csrfguard.CsrfGuard

Rotation in case of AJAX requests is not supported currently because of possible race conditions.

isTestPathRegex(String) - Static method in class org.owasp.csrfguard.util.RegexValidationUtil

see if a test path starts with ^ and ends with $ thus making it a regex

isTokenPerPageEnabled() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

isTokenPerPageEnabled() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isTokenPerPageEnabled() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isTokenPerPageEnabled() - Method in class org.owasp.csrfguard.CsrfGuard

isTokenPerPagePrecreate() - Method in class org.owasp.csrfguard.CsrfGuard

isTokenPerPagePrecreateEnabled() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

isTokenPerPagePrecreateEnabled() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isTokenPerPagePrecreateEnabled() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isUsedMasterToken() - Method in class org.owasp.csrfguard.token.businessobject.TokenBO

isUseNewTokenLandingPage() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

isUseNewTokenLandingPage() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isUseNewTokenLandingPage() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isUseNewTokenLandingPage() - Method in class org.owasp.csrfguard.CsrfGuard

isValid(HttpServletRequest, HttpServletResponse) - Method in class org.owasp.csrfguard.CsrfValidator

isValidateWhenNoSessionExists() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider

If csrf guard filter should check even if there is no session for the user Note: this changed around 2014/04, the default behavior used to be to not check if there is no session.

isValidateWhenNoSessionExists() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider

isValidateWhenNoSessionExists() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider

isValidateWhenNoSessionExists() - Method in class org.owasp.csrfguard.CsrfGuard

If csrf guard filter should check even if there is no session for the user Note: this changed in 2014/04/20, the default behavior used to be to not check if there is no session.

J

jarFile(Class) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

get a jar file from a sample class

JavaScriptConfigParameters - Class in org.owasp.csrfguard.config.properties.javascript

JavaScriptServlet - Class in org.owasp.csrfguard.servlet

JavaScriptServlet() - Constructor for class org.owasp.csrfguard.servlet.JavaScriptServlet

JsConfigParameter<T> - Class in org.owasp.csrfguard.config.properties.javascript

JsConfigParameter() - Constructor for class org.owasp.csrfguard.config.properties.javascript.JsConfigParameter

L

load(Properties) - Static method in class org.owasp.csrfguard.CsrfGuard

Log - Class in org.owasp.csrfguard.action

Log() - Constructor for class org.owasp.csrfguard.action.Log

LOGICAL_SESSION_EXTRACTOR_NAME - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

LogicalSession - Interface in org.owasp.csrfguard.session

Represents a logical session that enables decoupling from the container's session implementation in case the client application uses a stateless approach (e.g. token based authentication)

LogicalSessionExtractor - Interface in org.owasp.csrfguard.token.storage

M

MapToString(Map) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

Deprecated.

use mapToString(map)

mapToString(Map) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

convert a set to a string (comma separate)

MessageConstants - Class in org.owasp.csrfguard.util

MessageConstants - Maintains all the message constant literals.

META_INF_CSRFGUARD_PROPERTIES - Static variable in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider

MISMATCH_MASTER_TOKEN_MSG - Static variable in class org.owasp.csrfguard.util.MessageConstants

MISMATCH_PAGE_TOKEN_MSG - Static variable in class org.owasp.csrfguard.util.MessageConstants

N

needToCheckIfFilesNeedReloading() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

NEW_TOKEN_LANDING_PAGE - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

newInstance(Class<T>) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

Construct a class

newInstance(Class<T>, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

Construct a class

newInstance(Class<T>) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils

Construct a class

normalizeResourceURI(HttpServletRequest) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils

normalizeResourceURI(String) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils

NullConfigurationProvider - Class in org.owasp.csrfguard.config

ConfigurationProvider which returns all null or empty values (except for the logger).

NullConfigurationProvider() - Constructor for class org.owasp.csrfguard.config.NullConfigurationProvider

NullConfigurationProviderFactory - Class in org.owasp.csrfguard.config

TODO document

NullConfigurationProviderFactory() - Constructor for class org.owasp.csrfguard.config.NullConfigurationProviderFactory

O

onSessionCreated(LogicalSession) - Method in class org.owasp.csrfguard.CsrfGuard

Method to be called by a logical session implementation when a new session is created.

onSessionDestroyed(LogicalSession) - Method in class org.owasp.csrfguard.CsrfGuard

Method to be called by a logical session implementation when a session is destroyed.

org.owasp.csrfguard - package org.owasp.csrfguard

org.owasp.csrfguard.action - package org.owasp.csrfguard.action

org.owasp.csrfguard.config - package org.owasp.csrfguard.config

org.owasp.csrfguard.config.overlay - package org.owasp.csrfguard.config.overlay

org.owasp.csrfguard.config.properties - package org.owasp.csrfguard.config.properties

org.owasp.csrfguard.config.properties.javascript - package org.owasp.csrfguard.config.properties.javascript

org.owasp.csrfguard.exception - package org.owasp.csrfguard.exception

org.owasp.csrfguard.http - package org.owasp.csrfguard.http

org.owasp.csrfguard.servlet - package org.owasp.csrfguard.servlet

org.owasp.csrfguard.session - package org.owasp.csrfguard.session

org.owasp.csrfguard.token - package org.owasp.csrfguard.token

org.owasp.csrfguard.token.businessobject - package org.owasp.csrfguard.token.businessobject

org.owasp.csrfguard.token.mapper - package org.owasp.csrfguard.token.mapper

org.owasp.csrfguard.token.service - package org.owasp.csrfguard.token.service

org.owasp.csrfguard.token.storage - package org.owasp.csrfguard.token.storage

org.owasp.csrfguard.token.storage.impl - package org.owasp.csrfguard.token.storage.impl

org.owasp.csrfguard.token.transferobject - package org.owasp.csrfguard.token.transferobject

org.owasp.csrfguard.util - package org.owasp.csrfguard.util

OWASP_CSRF_GUARD_OVERLAY_PROPERTIES - Static variable in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider

ovrlay properties file

OWASP_CSRF_GUARD_PROPERTIES - Static variable in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider

base properties file

P

PAGE_TOKEN_SYNCHRONIZATION_TOLERANCE - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

PageTokenValue - Class in org.owasp.csrfguard.token.storage.impl

prefixOrSuffix(String, String, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

get the prefix or suffix of a string based on a separator

PRINT_ENABLED - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

printConfigIfConfigured(ServletContext, String) - Static method in class org.owasp.csrfguard.CsrfGuardServletContextListener

Prints the configuration to the ServletContext log file with the given prefix.

PRNG - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

PRNG_PROVIDER - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

properties() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

get the properties object for this config file

PropertiesConfigurationProvider - Class in org.owasp.csrfguard.config

ConfigurationProvider based on a Properties object.

PropertiesConfigurationProvider(Properties) - Constructor for class org.owasp.csrfguard.config.PropertiesConfigurationProvider

PropertiesConfigurationProviderFactory - Class in org.owasp.csrfguard.config

TODO document

PropertiesConfigurationProviderFactory() - Constructor for class org.owasp.csrfguard.config.PropertiesConfigurationProviderFactory

TODO document

propertiesFromResourceName(String, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

read properties from a resource, don't modify the properties returned since they are cached

propertiesHelper(boolean) - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

get the properties object for this config file

propertiesOverrideMap() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

override map for properties for testing

propertiesThreadLocalOverrideMap() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

override map for properties in thread local to be used in a web server or the like, based on property class this is static since the properties class can get reloaded, but these shouldn't

PropertyUtils - Class in org.owasp.csrfguard.config.properties

PROTECTED_METHODS - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

PROTECTED_PAGE_PREFIX - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

ProtectionResult - Class in org.owasp.csrfguard

ProtectionResult(boolean, String) - Constructor for class org.owasp.csrfguard.ProtectionResult

put(K, V) - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache

put a value into the cache, accept the default time to live for this cache

put(K, V, int) - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache

put a value into the cache, accept the default time to live for this cache

R

RANDOM_TOKEN_FAILURE_MSG - Static variable in class org.owasp.csrfguard.util.MessageConstants

RandomGenerator - Class in org.owasp.csrfguard.util

readFileContent(String) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils

readInputStreamContent(InputStream) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils

readResourceFileContent(String) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils

Redirect - Class in org.owasp.csrfguard.action

Redirect() - Constructor for class org.owasp.csrfguard.action.Redirect

REFERER_MATCH_DOMAIN - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

REFERER_MATCH_PROTOCOL - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

REFERER_PATTERN - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

regenerateUsedPageToken(String, Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken

regenerateUsedPageToken(String, String, Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder

regenerateUsedPageToken(String, Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.Token

TODO is it worth the added performance penalty in case of a large application with a lot of pages?

regenerateUsedPageToken(String, String, Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder

Re-generates the value of a used page token

RegexValidationUtil - Class in org.owasp.csrfguard.util

RegexValidationUtil - All functions related to regex operations.

remove(String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder

remove(String) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder

Removes all tokens related to a specific logical session key

REQUEST_MISSING_TOKEN_MSG - Static variable in class org.owasp.csrfguard.util.MessageConstants

RequestAttribute - Class in org.owasp.csrfguard.action

RequestAttribute() - Constructor for class org.owasp.csrfguard.action.RequestAttribute

retrieveConfig(Class<T>) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

retrieve a config from the config file or from cache

retrieveConfig() - Static method in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider

retrieve a config from the config file or from cache

retrieveConfiguration(Properties) - Method in interface org.owasp.csrfguard.config.ConfigurationProviderFactory

Called when retrieving the configuration

retrieveConfiguration(Properties) - Method in class org.owasp.csrfguard.config.NullConfigurationProviderFactory

retrieveConfiguration(Properties) - Method in class org.owasp.csrfguard.config.overlay.ConfigurationAutodetectProviderFactory

retrieveConfiguration(Properties) - Method in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProviderFactory

retrieveConfiguration(Properties) - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProviderFactory

retrieveContents(ConfigPropertiesCascadeBase) - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFile

get the contents from the config file

retrieveFromConfigFileOrCache() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

see if there is one in cache, if so, use it, if not, get from config files

retrieveFromConfigFiles() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase

get the config object from config files

Rotate - Class in org.owasp.csrfguard.action

Rotate() - Constructor for class org.owasp.csrfguard.action.Rotate

ROTATE - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

rotateAllPageTokens(Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken

rotateAllPageTokens(String, Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder

rotateAllPageTokens(Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.Token

Rotates all the existing page token values

rotateAllPageTokens(String, Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder

Re-generates all existing tokens associated to the provided logical session key

rotateAllTokens(String) - Method in class org.owasp.csrfguard.token.service.TokenService

Rotates (re-generates) the master token and all page tokens if the token-per-page functionality is enabled.

rotateUsedToken(String, String, TokenBO) - Method in class org.owasp.csrfguard.token.service.TokenService

Rotates the used master or the currently requested page token if the token-per-page functionality is enabled.

S

sendRedirect(String) - Method in class org.owasp.csrfguard.http.InterceptRedirectResponse

setAttribute(String, Object) - Method in interface org.owasp.csrfguard.session.LogicalSession

Saves an object to the current session

setContents(String) - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFile

setMasterToken(String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken

setMasterToken(String, String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder

setMasterToken(String) - Method in interface org.owasp.csrfguard.token.storage.Token

Sets the new master token

setMasterToken(String, String) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder

Sets or overwrites the master token bound to a specific session key.

setName(String) - Method in class org.owasp.csrfguard.action.AbstractAction

setName(String) - Method in interface org.owasp.csrfguard.action.IAction

Sets the name of the action

setPageToken(String, String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken

setPageToken(String, String, String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder

setPageToken(String, String) - Method in interface org.owasp.csrfguard.token.storage.Token

setPageToken(String, String, String) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder

Sets the value of a page token based on the desired HTTP resource URI and logical session key

setPageTokenIfAbsent(String, Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken

setPageTokenIfAbsent(String, Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.Token

setPageTokens(Map<String, String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken

setPageTokens(String, Map<String, String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder

setPageTokens(Map<String, String>) - Method in interface org.owasp.csrfguard.token.storage.Token

Initialize or overwrite the entire page-token map

setPageTokens(String, Map<String, String>) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder

Sets/overwrites the page tokens with the provided values

setParameter(String, String) - Method in class org.owasp.csrfguard.action.AbstractAction

setParameter(String, String) - Method in interface org.owasp.csrfguard.action.IAction

Sets a parameter with a custom name and value

setTokensGenerated(boolean) - Method in interface org.owasp.csrfguard.session.LogicalSession

Set whether the objects were generated or not.

setUpdatedMasterToken(String) - Method in class org.owasp.csrfguard.token.businessobject.TokenBO

setUpdatedPageToken(String, String) - Method in class org.owasp.csrfguard.token.businessobject.TokenBO

setUsedMasterToken(String) - Method in class org.owasp.csrfguard.token.businessobject.TokenBO

setUsedPageToken(String) - Method in class org.owasp.csrfguard.token.businessobject.TokenBO

SimpleBooleanConfigParameter - Class in org.owasp.csrfguard.config.properties

SimpleBooleanConfigParameter(String, boolean) - Constructor for class org.owasp.csrfguard.config.properties.SimpleBooleanConfigParameter

SimpleConfigParameter<T> - Interface in org.owasp.csrfguard.config.properties

Interface describing a simple configuration parameter

SimpleDurationParameter - Class in org.owasp.csrfguard.config.properties

SimpleDurationParameter(String, Duration) - Constructor for class org.owasp.csrfguard.config.properties.SimpleDurationParameter

SimpleIntConfigParameter - Class in org.owasp.csrfguard.config.properties

SimpleIntConfigParameter(String, int) - Constructor for class org.owasp.csrfguard.config.properties.SimpleIntConfigParameter

size(boolean) - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache

number of elements in map (and check for

SOURCE_FILE_LOCATION - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

split(String, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

Splits the provided text into an array, separators specified.

splitPreserveAllTokens(String, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

Splits the provided text into an array, separators specified, preserving all tokens, including empty tokens created by adjacent separators.

splitTrim(String, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

split a string based on a separator into an array, and trim each entry (see the Commons Util trim() for more details)

splitTrim(String, String, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

split a string based on a separator into an array, and trim each entry (see the Commons Util trim() for more details)

splitTrimToList(String, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

split a string based on a separator into an array, and trim each entry (see the Commons Util trim() for more details)

staticToString() - Static method in class org.owasp.csrfguard.config.overlay.ExpirableCache

string representation of cache

StringJsConfigParameter - Class in org.owasp.csrfguard.config.properties.javascript

StringJsConfigParameter(String, String, String) - Constructor for class org.owasp.csrfguard.config.properties.javascript.StringJsConfigParameter

stripLastSlashIfExists(String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

strip the last slash (/ or \) from a string if it exists

substituteExpressionLanguage(String, Map<String, Object>) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeUtils

substitute an EL for objects.

substituteExpressionLanguage(String, Map<String, Object>, boolean, boolean, boolean, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeUtils

substitute an EL for objects

T

Token - Interface in org.owasp.csrfguard.token.storage

Interface used to interact with CSRF tokens

TOKEN_HOLDER - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

TOKEN_LENGTH - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

TOKEN_MISSING_FROM_STORAGE_MSG - Static variable in class org.owasp.csrfguard.util.MessageConstants

TOKEN_NAME - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

TOKEN_PER_PAGE - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

TOKEN_PER_PAGE_PRECREATE - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

TokenBO - Class in org.owasp.csrfguard.token.businessobject

TokenBO() - Constructor for class org.owasp.csrfguard.token.businessobject.TokenBO

TokenBO(String) - Constructor for class org.owasp.csrfguard.token.businessobject.TokenBO

TokenBO(Map<String, String>) - Constructor for class org.owasp.csrfguard.token.businessobject.TokenBO

TokenBO(String, Map<String, String>) - Constructor for class org.owasp.csrfguard.token.businessobject.TokenBO

TokenHolder - Interface in org.owasp.csrfguard.token.storage

Interface used for storing and manipulating tokens across the solution.

TokenMapper - Class in org.owasp.csrfguard.token.mapper

TokenService - Class in org.owasp.csrfguard.token.service

TokenService(CsrfGuard) - Constructor for class org.owasp.csrfguard.token.service.TokenService

TokenTO - Class in org.owasp.csrfguard.token.transferobject

TokenTO(String) - Constructor for class org.owasp.csrfguard.token.transferobject.TokenTO

TokenTO(Map<String, String>) - Constructor for class org.owasp.csrfguard.token.transferobject.TokenTO

TokenTO(String, Map<String, String>) - Constructor for class org.owasp.csrfguard.token.transferobject.TokenTO

TokenUtils - Class in org.owasp.csrfguard.token

toList(T...) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

return a list of objects from varargs.

toString(InputStream, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

Get the contents of an InputStream as a String.

toString() - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache

string representation of cache

toString() - Method in class org.owasp.csrfguard.CsrfGuard

toString() - Method in class org.owasp.csrfguard.token.transferobject.TokenTO

toString() - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder

toTransferObject(TokenBO) - Static method in class org.owasp.csrfguard.token.mapper.TokenMapper

trim(String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils

trim whitespace from string

U

UNPROTECTED_EXTENSIONS - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

UNPROTECTED_METHODS - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

UNPROTECTED_PAGE_PREFIX - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

V

validate(Collection<String>) - Static method in enum org.owasp.csrfguard.config.properties.HttpMethod

validate(String) - Static method in enum org.owasp.csrfguard.config.properties.HttpMethod

VALIDATE_WHEN_NO_SESSION_EXISTS - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters

valueOf(String) - Static method in enum org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFileType

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum org.owasp.csrfguard.config.overlay.ExpirableCache.ExpirableCacheUnit

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum org.owasp.csrfguard.config.properties.HttpMethod

Returns the enum constant of this type with the specified name.

valueOfIgnoreCase(String) - Static method in enum org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFileType

do a case-insensitive matching

values() - Static method in enum org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFileType

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum org.owasp.csrfguard.config.overlay.ExpirableCache.ExpirableCacheUnit

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum org.owasp.csrfguard.config.properties.HttpMethod

Returns an array containing the constants of this enum type, in the order they are declared.

verifyToken(HttpServletRequest, String, String, String) - Method in class org.owasp.csrfguard.token.service.TokenService

Verifies the validity of the current request.

W

writeLandingPage(HttpServletResponse, String) - Method in class org.owasp.csrfguard.CsrfGuard

X

X_REQUESTED_WITH - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters

A B C D E F G H I J L M N O P R S T U V W X