A B C D E F G H I J L M N O P R S T U V W X
All Classes All Packages
All Classes All Packages
All Classes All Packages
A
- AbstractAction - Class in org.owasp.csrfguard.action
- AbstractAction() - Constructor for class org.owasp.csrfguard.action.AbstractAction
- ACTION_ATTRIBUTE_NAME - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- ACTION_PREFIX - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- addResponseTokenHeader(CsrfGuard, HttpServletRequest, HttpServletResponse, TokenTO) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils
- AJAX_ENABLED - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- append(String, boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, boolean[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, boolean[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, byte) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, byte[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, byte[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, char) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, char[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, char[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, double) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, double[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, double[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, float) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, float[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, float[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, int) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, int[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, int[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, long) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, long[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, long[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, short) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, short[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, short[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, Object) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, Object[]) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, Object[], boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- append(String, Object, boolean) - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- areTokensGenerated() - Method in interface org.owasp.csrfguard.session.LogicalSession
B
- BooleanJsConfigParameter - Class in org.owasp.csrfguard.config.properties.javascript
- BooleanJsConfigParameter(String, String, boolean) - Constructor for class org.owasp.csrfguard.config.properties.javascript.BooleanJsConfigParameter
- BrowserEncoder - Class in org.owasp.csrfguard.util
C
- CACHE_CONTROL - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
- checkForEvictions(boolean) - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache
-
check and remove elements that are stale
- classLoader() - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
fast class loader
- className(Object) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
null safe classname method, gets the unenhanced name
- CLASSPATH - org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFileType
-
get a config file from the classpath
- clear() - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache
-
delete the cache
- clearAll() - Static method in class org.owasp.csrfguard.config.overlay.ExpirableCache
-
clear out all caches everywhere (session, request, context, etc)
- clone() - Method in class org.owasp.csrfguard.util.BrowserEncoder
- clone() - Method in class org.owasp.csrfguard.util.RandomGenerator
- closeQuietly(InputStream) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
Unconditionally close an
InputStream. - commonSubstitutions(String) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils
-
Replaces percent-bounded expressions such as "%servletContext%." common substitutions in config values
- computeUrl(String, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
compute a url of a resource
- CONFIG_OVERLAY_HIERARCHY_PROPERTY_NAME - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- CONFIG_OVERLAY_UPDATE_CHECK_PROPERTY_NAME - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- CONFIG_PROVIDER_FACTORY_PROPERTY_NAME - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- ConfigFile(String) - Constructor for class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFile
- ConfigParameters - Class in org.owasp.csrfguard.config.properties
- ConfigPropertiesCascadeBase - Class in org.owasp.csrfguard.config.overlay
-
Base class for a cascaded config.
- ConfigPropertiesCascadeBase() - Constructor for class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
- ConfigPropertiesCascadeBase.ConfigFile - Class in org.owasp.csrfguard.config.overlay
- ConfigPropertiesCascadeBase.ConfigFileType - Enum in org.owasp.csrfguard.config.overlay
-
config file type
- ConfigPropertiesCascadeCommonUtils - Class in org.owasp.csrfguard.config.overlay
-
utility methods for grouper.
- ConfigPropertiesCascadeCommonUtils() - Constructor for class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
- ConfigPropertiesCascadeUtils - Class in org.owasp.csrfguard.config.overlay
-
utility methods specific to grouper client
- ConfigPropertiesCascadeUtils() - Constructor for class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeUtils
- ConfigurationAutodetectProviderFactory - Class in org.owasp.csrfguard.config.overlay
-
The default configuration provider is:
ConfigurationAutodetectProviderFactorywhich will look for an overlay file, it is there, and the factory inside that file is set it will use it, otherwise will bePropertiesConfigurationProviderFactoryit needs to implementConfigurationProviderFactory - ConfigurationAutodetectProviderFactory() - Constructor for class org.owasp.csrfguard.config.overlay.ConfigurationAutodetectProviderFactory
-
TODO document
- ConfigurationOverlayProvider - Class in org.owasp.csrfguard.config.overlay
-
Use configuration overlays that use the base properties as a default, and then decorate with an overlay file
- ConfigurationOverlayProvider() - Constructor for class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider
- ConfigurationOverlayProviderFactory - Class in org.owasp.csrfguard.config.overlay
-
TODO document
- ConfigurationOverlayProviderFactory() - Constructor for class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProviderFactory
-
TODO document
- ConfigurationProvider - Interface in org.owasp.csrfguard.config
-
Interface that enables interaction with configuration providers
- ConfigurationProviderFactory - Interface in org.owasp.csrfguard.config
-
implement this interface to provide the configuration
- CONNECT - org.owasp.csrfguard.config.properties.HttpMethod
- contextDestroyed(ServletContextEvent) - Method in class org.owasp.csrfguard.CsrfGuardServletContextListener
- contextInitialized(ServletContextEvent) - Method in class org.owasp.csrfguard.CsrfGuardServletContextListener
- copy(InputStream, Writer, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
Copy and convert bytes from an
InputStreamto chars on aWriter, using the specified encoding. - copy(Reader, Writer) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
Copy chars from a
Readerto aWriter. - createMasterTokenIfAbsent(String) - Method in class org.owasp.csrfguard.token.service.TokenService
-
Creates master token if it does not exist already.
- createMasterTokenIfAbsent(String, Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder
- createMasterTokenIfAbsent(String, Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder
-
Creates and returns a new master token bound to the provided session key if there wasn't any or returns the existing value.
- createPageTokenIfAbsent(String, String, Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder
- createPageTokenIfAbsent(String, String, Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder
-
Creates and returns a new page token bound to the provided resource URI and mapped to the session key if there wasn't any or returns the existing value.
- CsrfGuard - Class in org.owasp.csrfguard
- CsrfGuard() - Constructor for class org.owasp.csrfguard.CsrfGuard
- CSRFGUARD_ENABLED - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- CSRFGUARD_PROTECT - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- CsrfGuardException - Exception in org.owasp.csrfguard
- CsrfGuardException(Exception) - Constructor for exception org.owasp.csrfguard.CsrfGuardException
- CsrfGuardException(String) - Constructor for exception org.owasp.csrfguard.CsrfGuardException
- CsrfGuardException(String, Exception) - Constructor for exception org.owasp.csrfguard.CsrfGuardException
- CsrfGuardFilter - Class in org.owasp.csrfguard
- CsrfGuardFilter() - Constructor for class org.owasp.csrfguard.CsrfGuardFilter
- CsrfGuardPropertiesToStringBuilder - Class in org.owasp.csrfguard.util
- CsrfGuardPropertiesToStringBuilder(Object) - Constructor for class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- CsrfGuardServletContextListener - Class in org.owasp.csrfguard
- CsrfGuardServletContextListener() - Constructor for class org.owasp.csrfguard.CsrfGuardServletContextListener
- CSRFGuardTokenException - Exception in org.owasp.csrfguard.exception
-
CSRFGuardTokenException - Runtime Exception handling all token related errors.
- CSRFGuardTokenException(String) - Constructor for exception org.owasp.csrfguard.exception.CSRFGuardTokenException
- CSRFGuardTokenException(String, Throwable) - Constructor for exception org.owasp.csrfguard.exception.CSRFGuardTokenException
- CSRFGuardTokenException(Throwable) - Constructor for exception org.owasp.csrfguard.exception.CSRFGuardTokenException
- CsrfGuardUtils - Class in org.owasp.csrfguard.util
-
Various utility methods/helpers.
- CsrfValidator - Class in org.owasp.csrfguard
- CsrfValidator() - Constructor for class org.owasp.csrfguard.CsrfValidator
D
- DEFAULT_BUFFER_SIZE - Static variable in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
The name says it all.
- DEFAULT_PRNG - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- DEFAULT_REFERER_PATTERN - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
- defaultString(String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
Returns either the passed in String, or if the String is
null, an empty String (""). - defaultTimeToLiveMillis(int) - Method in enum org.owasp.csrfguard.config.overlay.ExpirableCache.ExpirableCacheUnit
-
default time to live based on units
- DELETE - org.owasp.csrfguard.config.properties.HttpMethod
- destroy() - Method in class org.owasp.csrfguard.CsrfGuardFilter
- doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.owasp.csrfguard.CsrfGuardFilter
- doGet(HttpServletRequest, HttpServletResponse) - Method in class org.owasp.csrfguard.servlet.JavaScriptServlet
- DOMAIN_ORIGIN - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- DOMAIN_STRICT - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
- doPost(HttpServletRequest, HttpServletResponse) - Method in class org.owasp.csrfguard.servlet.JavaScriptServlet
- DYNAMIC_NODE_CREATION_EVENT_NAME - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
E
- Empty - Class in org.owasp.csrfguard.action
-
TODO document or why it is needed or remove this Action
- Empty() - Constructor for class org.owasp.csrfguard.action.Empty
- EMPTY_STRING_ARRAY - Static variable in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
An empty immutable
Stringarray. - encodeForAttribute(String) - Static method in class org.owasp.csrfguard.util.BrowserEncoder
- encodeForHtml(String) - Static method in class org.owasp.csrfguard.util.BrowserEncoder
- enumValueOfIgnoreCase(Class<E>, String, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
do a case-insensitive matching
- equals(String, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
null safe string compare
- equalsIgnoreCase(String, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
null-safe equalsignorecase
- Error - Class in org.owasp.csrfguard.action
- Error() - Constructor for class org.owasp.csrfguard.action.Error
- execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Empty
- execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Error
- execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Forward
- execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in interface org.owasp.csrfguard.action.IAction
-
Executes this action.
- execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Invalidate
- execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Log
- execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Redirect
- execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.RequestAttribute
- execute(HttpServletRequest, HttpServletResponse, CsrfGuardException, CsrfGuard) - Method in class org.owasp.csrfguard.action.Rotate
- ExpirableCache<K,V> - Class in org.owasp.csrfguard.config.overlay
-
This is like a map, but the setters also take an expire time which will mean the items in the cache will be automatically deleted.
- ExpirableCache() - Constructor for class org.owasp.csrfguard.config.overlay.ExpirableCache
- ExpirableCache(int) - Constructor for class org.owasp.csrfguard.config.overlay.ExpirableCache
- ExpirableCache(ExpirableCache.ExpirableCacheUnit, int) - Constructor for class org.owasp.csrfguard.config.overlay.ExpirableCache
- ExpirableCache.ExpirableCacheUnit - Enum in org.owasp.csrfguard.config.overlay
-
unit of time for expirable cache
- ExpirableValue<T> - Class in org.owasp.csrfguard.config.overlay
-
This holds the actual value of the map, and the time it was inserted, and the time that it should last in the cache
- extract(HttpServletRequest) - Method in interface org.owasp.csrfguard.token.storage.LogicalSessionExtractor
-
Returns a logical session implementation based on the information extracted from the current HTTP request or null if that was not possible
- extractOrCreate(HttpServletRequest) - Method in interface org.owasp.csrfguard.token.storage.LogicalSessionExtractor
-
Returns a logical session implementation based on the information extracted from the current HTTP request or creates a new one
F
- FILE - org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFileType
-
get a config file from the filesystem
- fileCanonicalPath(File) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
get canonical path of file
- filesNeedReloadingBasedOnContents() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
- FORCE_SYNCHRONOUS_AJAX - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- forName(String) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils
-
Returns the class object.
- Forward - Class in org.owasp.csrfguard.action
- Forward() - Constructor for class org.owasp.csrfguard.action.Forward
- from(String) - Static method in class org.owasp.csrfguard.token.storage.impl.PageTokenValue
- from(String, LocalDateTime) - Static method in class org.owasp.csrfguard.token.storage.impl.PageTokenValue
G
- generateProtectedPageTokens(String) - Method in class org.owasp.csrfguard.token.service.TokenService
-
Generates new random tokens for configured protected pages.
- generateRandomId(String, String, int) - Static method in class org.owasp.csrfguard.util.RandomGenerator
- generateRandomId(SecureRandom, int) - Static method in class org.owasp.csrfguard.util.RandomGenerator
- generateRandomToken() - Static method in class org.owasp.csrfguard.token.TokenUtils
-
Create a random token based on the configuration.
- generateTokensIfAbsent(String, String, String) - Method in class org.owasp.csrfguard.token.service.TokenService
-
Generates master token and page token for the current resource if the token-per-page configuration is enabled
- get(K) - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache
-
get a value or null if not there or expired this will check for eviction, and evict if evictable
- GET - org.owasp.csrfguard.config.properties.HttpMethod
- getActions() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getActions() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getActions() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getActions() - Method in class org.owasp.csrfguard.CsrfGuard
- getAttribute(String) - Method in interface org.owasp.csrfguard.session.LogicalSession
-
Retrieves an object from the session using its name
- getCacheEvictions() - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache
-
number of items evicted from cache
- getCacheHits() - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache
-
number of items successfully retrieved from cache
- getCacheInserts() - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache
-
number of items inserted into the cache
- getClassInSiblingJar() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
if it's ok to put the config file in the same directory as a jar, then return a class in the jar here
- getConfigFileName() - Static method in class org.owasp.csrfguard.CsrfGuardServletContextListener
-
config file name if specified in the web.xml
- getContents() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFile
-
the contents when the config file was read
- getCreationTime() - Method in class org.owasp.csrfguard.token.storage.impl.PageTokenValue
- getDefaultTimeToLiveInMillis() - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache
-
expose the length of cache
- getDefaultValue() - Method in class org.owasp.csrfguard.config.properties.SimpleBooleanConfigParameter
- getDefaultValue() - Method in interface org.owasp.csrfguard.config.properties.SimpleConfigParameter
- getDefaultValue() - Method in class org.owasp.csrfguard.config.properties.SimpleDurationParameter
- getDefaultValue() - Method in class org.owasp.csrfguard.config.properties.SimpleIntConfigParameter
- getDomainOrigin() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
-
TODO Currently not configurable through the properties!
- getDomainOrigin() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getDomainOrigin() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getDomainOrigin() - Method in class org.owasp.csrfguard.CsrfGuard
- getHierarchyConfigKey() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
config key of the hierarchy value
- getHierarchyConfigKey() - Method in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider
- getInitParameter(ServletConfig, String, String, boolean) - Static method in class org.owasp.csrfguard.config.properties.javascript.JsConfigParameter
- getInitParameter(ServletConfig, String, String, String) - Static method in class org.owasp.csrfguard.config.properties.javascript.JsConfigParameter
- getInitParameter(ServletConfig, String, String, T, Function<String, T>) - Static method in class org.owasp.csrfguard.config.properties.javascript.JsConfigParameter
- getInstance() - Static method in class org.owasp.csrfguard.CsrfGuard
- getJavascriptCacheControl() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getJavascriptCacheControl() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getJavascriptCacheControl() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getJavascriptCacheControl() - Method in class org.owasp.csrfguard.CsrfGuard
- getJavascriptDynamicNodeCreationEventName() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getJavascriptDynamicNodeCreationEventName() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getJavascriptDynamicNodeCreationEventName() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getJavascriptDynamicNodeCreationEventName() - Method in class org.owasp.csrfguard.CsrfGuard
- getJavascriptRefererPattern() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getJavascriptRefererPattern() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getJavascriptRefererPattern() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getJavascriptRefererPattern() - Method in class org.owasp.csrfguard.CsrfGuard
- getJavascriptTemplateCode() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getJavascriptTemplateCode() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getJavascriptTemplateCode() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getJavascriptTemplateCode() - Method in class org.owasp.csrfguard.CsrfGuard
- getJavascriptUnprotectedExtensions() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
-
example: "js,css,gif,png,ico,jpg"
- getJavascriptUnprotectedExtensions() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getJavascriptUnprotectedExtensions() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getJavascriptUnprotectedExtensions() - Method in class org.owasp.csrfguard.CsrfGuard
- getJavascriptUris() - Static method in class org.owasp.csrfguard.servlet.JavaScriptServlet
-
whitelist the javascript servlet from csrf errors
- getJavascriptXrequestedWith() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
-
TODO document
- getJavascriptXrequestedWith() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getJavascriptXrequestedWith() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getJavascriptXrequestedWith() - Method in class org.owasp.csrfguard.CsrfGuard
- getKey() - Method in interface org.owasp.csrfguard.session.LogicalSession
-
Returns the logical session key
- getLogicalSessionExtractor() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getLogicalSessionExtractor() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getLogicalSessionExtractor() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getLogicalSessionExtractor() - Method in class org.owasp.csrfguard.CsrfGuard
- getMainConfigClasspath() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
get the main config classpath, e.g.
- getMainConfigClasspath() - Method in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider
- getMainExampleConfigClasspath() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
get the example config classpath, e.g.
- getMainExampleConfigClasspath() - Method in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider
- getMasterToken() - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken
- getMasterToken() - Method in interface org.owasp.csrfguard.token.storage.Token
-
Returns the master token
- getMasterToken(String) - Method in class org.owasp.csrfguard.token.service.TokenService
-
Returns the master token assigned to the unique identifier extracted from the current request.
- getName() - Method in class org.owasp.csrfguard.action.AbstractAction
- getName() - Method in interface org.owasp.csrfguard.action.IAction
- getName() - Method in class org.owasp.csrfguard.config.properties.SimpleBooleanConfigParameter
- getName() - Method in interface org.owasp.csrfguard.config.properties.SimpleConfigParameter
- getName() - Method in class org.owasp.csrfguard.config.properties.SimpleDurationParameter
- getName() - Method in class org.owasp.csrfguard.config.properties.SimpleIntConfigParameter
- getNewTokenLandingPage() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getNewTokenLandingPage() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getNewTokenLandingPage() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getNewTokenLandingPage() - Method in class org.owasp.csrfguard.CsrfGuard
- getPageToken(String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken
- getPageToken(String) - Method in interface org.owasp.csrfguard.token.storage.Token
- getPageToken(String, String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder
- getPageToken(String, String) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder
-
Returns the page token based on the desired HTTP resource URI and logical session key
- getPageTokens() - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken
- getPageTokens() - Method in interface org.owasp.csrfguard.token.storage.Token
- getPageTokens(String) - Method in class org.owasp.csrfguard.token.service.TokenService
-
Return the page tokens if the functionality is enabled and the client has already accessed a protected resource, or if the token pre-creation is enabled.
- getPageTokens(String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder
- getPageTokens(String) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder
-
Returns all page tokens associated to the provided logical session key
- getPageTokenSynchronizationTolerance() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getPageTokenSynchronizationTolerance() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getPageTokenSynchronizationTolerance() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getPageTokenSynchronizationTolerance() - Method in class org.owasp.csrfguard.CsrfGuard
- getParameter(String) - Method in class org.owasp.csrfguard.action.AbstractAction
- getParameter(String) - Method in interface org.owasp.csrfguard.action.IAction
- getParameterMap() - Method in class org.owasp.csrfguard.action.AbstractAction
- getParameterMap() - Method in interface org.owasp.csrfguard.action.IAction
- getPrng() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getPrng() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getPrng() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getPrng() - Method in class org.owasp.csrfguard.CsrfGuard
- getProperty(Properties, String) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils
-
property string and substitutions
- getProperty(Properties, String, String) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils
-
property string and substitutions
- getProperty(Properties, String, T, Function<String, T>) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils
- getProperty(Properties, Pair<String, String>) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils
- getProperty(Properties, SimpleBooleanConfigParameter) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils
- getProperty(Properties, SimpleConfigParameter<T>, Function<String, T>) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils
- getProperty(Properties, SimpleDurationParameter) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils
- getProperty(Properties, SimpleIntConfigParameter) - Static method in class org.owasp.csrfguard.config.properties.PropertyUtils
- getProperty(ServletConfig, Properties) - Method in class org.owasp.csrfguard.config.properties.javascript.BooleanJsConfigParameter
- getProperty(ServletConfig, Properties) - Method in class org.owasp.csrfguard.config.properties.javascript.JsConfigParameter
- getProperty(ServletConfig, Properties) - Method in class org.owasp.csrfguard.config.properties.javascript.StringJsConfigParameter
- getProtectedMethods() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getProtectedMethods() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getProtectedMethods() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getProtectedMethods() - Method in class org.owasp.csrfguard.CsrfGuard
- getProtectedPages() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getProtectedPages() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getProtectedPages() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getProtectedPages() - Method in class org.owasp.csrfguard.CsrfGuard
- getRegexPatternCache() - Method in class org.owasp.csrfguard.CsrfGuard
- getResourceIdentifier() - Method in class org.owasp.csrfguard.ProtectionResult
- getSecondsToCheckConfigKey() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
config key of the time in seconds to check config.
- getSecondsToCheckConfigKey() - Method in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider
- getServletContext() - Static method in class org.owasp.csrfguard.CsrfGuardServletContextListener
-
servlet context (will be the empty string if it is / )
- getStaticServletConfig() - Static method in class org.owasp.csrfguard.servlet.JavaScriptServlet
- getTimedPageToken(String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken
- getTimedPageToken(String) - Method in interface org.owasp.csrfguard.token.storage.Token
- getTimeToCheckConfigSeconds() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
when we build the config object, get the time to check config in seconds
- getToken(String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder
- getToken(String) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder
-
Returns the master and page tokens associated to a logical session key
- getTokenHolder() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getTokenHolder() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getTokenHolder() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getTokenHolder() - Method in class org.owasp.csrfguard.CsrfGuard
- getTokenLength() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
-
This parameter controls how long a generated token should be.
- getTokenLength() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getTokenLength() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getTokenLength() - Method in class org.owasp.csrfguard.CsrfGuard
- getTokenName() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getTokenName() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getTokenName() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getTokenName() - Method in class org.owasp.csrfguard.CsrfGuard
- getTokenService() - Method in class org.owasp.csrfguard.CsrfGuard
- getTokenValue(String, String) - Method in class org.owasp.csrfguard.token.service.TokenService
-
Returns the master or the page token for the associated resource depending on whether the token-per-page configuration is enabled or not.
- getUnprotectedMethods() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
-
if there are methods here, then all other HTTP methods are protected and these (e.g.
- getUnprotectedMethods() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getUnprotectedMethods() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getUnprotectedMethods() - Method in class org.owasp.csrfguard.CsrfGuard
-
if there are methods specified, then they (e.g.
- getUnprotectedPages() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- getUnprotectedPages() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- getUnprotectedPages() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- getUnprotectedPages() - Method in class org.owasp.csrfguard.CsrfGuard
- getUpdatedMasterToken() - Method in class org.owasp.csrfguard.token.businessobject.TokenBO
- getUpdatedPageTokens() - Method in class org.owasp.csrfguard.token.businessobject.TokenBO
- getUseNewTokenLandingPage(String) - Static method in class org.owasp.csrfguard.config.properties.ConfigParameters
- getValue() - Method in class org.owasp.csrfguard.token.storage.impl.PageTokenValue
H
- HEAD - org.owasp.csrfguard.config.properties.HttpMethod
- HttpMethod - Enum in org.owasp.csrfguard.config.properties
- httpProtocolAndDomain(String, boolean) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils
-
for a url, get the protocol and domain, e.g.
I
- IAction - Interface in org.owasp.csrfguard.action
-
Interface enabling interaction with Actions, that are invoked in case of a potential CSRF attack
- init(FilterConfig) - Method in class org.owasp.csrfguard.CsrfGuardFilter
- init(ServletConfig) - Method in class org.owasp.csrfguard.servlet.JavaScriptServlet
- initializeJavaScriptConfiguration() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
-
JavaScript configuration parameters can be set/overwritten via the servlet configuration.
- initializeJavaScriptConfiguration() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- initializeJavaScriptConfiguration() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- initializeJavaScriptConfiguration() - Method in class org.owasp.csrfguard.CsrfGuard
- INJECT_FORM_ATTRIBUTES - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
- INJECT_GET_FORMS - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
- INJECT_INTO_ATTRIBUTES - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
- INJECT_INTO_DYNAMICALLY_CREATED_NODES - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
- INJECT_INTO_FORMS - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
- InMemoryToken - Class in org.owasp.csrfguard.token.storage.impl
- InMemoryToken(String) - Constructor for class org.owasp.csrfguard.token.storage.impl.InMemoryToken
- InMemoryToken(String, Pair<String, String>) - Constructor for class org.owasp.csrfguard.token.storage.impl.InMemoryToken
- InMemoryTokenHolder - Class in org.owasp.csrfguard.token.storage.impl
- InMemoryTokenHolder() - Constructor for class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder
- inputStream(String, ConfigPropertiesCascadeBase) - Method in enum org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFileType
-
get the inputstream to read the config
- InterceptRedirectResponse - Class in org.owasp.csrfguard.http
- InterceptRedirectResponse(HttpServletResponse, HttpServletRequest, CsrfGuard) - Constructor for class org.owasp.csrfguard.http.InterceptRedirectResponse
- intValue(Object) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
convert an object to a int
- invalidate() - Method in interface org.owasp.csrfguard.session.LogicalSession
-
Invalidates this session then unbinds any objects bound to it.
- invalidate(LogicalSession) - Method in class org.owasp.csrfguard.token.service.TokenService
-
Invalidates the logical session and removes all tokens from the storage
- Invalidate - Class in org.owasp.csrfguard.action
- Invalidate() - Constructor for class org.owasp.csrfguard.action.Invalidate
- isAjaxEnabled() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- isAjaxEnabled() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isAjaxEnabled() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isAjaxEnabled() - Method in class org.owasp.csrfguard.CsrfGuard
- isAjaxRequest(HttpServletRequest) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils
- isBlank(String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
Checks if a String is whitespace, empty ("") or null.
- isCacheable() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- isCacheable() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isCacheable() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isEmpty() - Method in class org.owasp.csrfguard.token.transferobject.TokenTO
- isEnabled() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
-
if the filter is enabled
- isEnabled() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isEnabled() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isEnabled() - Method in class org.owasp.csrfguard.CsrfGuard
- isForceSynchronousAjax() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- isForceSynchronousAjax() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isForceSynchronousAjax() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isForceSynchronousAjax() - Method in class org.owasp.csrfguard.CsrfGuard
- isJavascriptDomainStrict() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- isJavascriptDomainStrict() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isJavascriptDomainStrict() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isJavascriptDomainStrict() - Method in class org.owasp.csrfguard.CsrfGuard
- isJavascriptInjectFormAttributes() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
-
if the token should be injected in the action in forms note, if injectIntoForms is true, then this might not need to be true
- isJavascriptInjectFormAttributes() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isJavascriptInjectFormAttributes() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isJavascriptInjectFormAttributes() - Method in class org.owasp.csrfguard.CsrfGuard
- isJavascriptInjectGetForms() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
-
if the token should be injected in GET forms (which will be on the URL) if the HTTP method GET is unprotected, then this should likely be false
- isJavascriptInjectGetForms() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isJavascriptInjectGetForms() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isJavascriptInjectGetForms() - Method in class org.owasp.csrfguard.CsrfGuard
- isJavascriptInjectIntoAttributes() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- isJavascriptInjectIntoAttributes() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isJavascriptInjectIntoAttributes() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isJavascriptInjectIntoAttributes() - Method in class org.owasp.csrfguard.CsrfGuard
- isJavascriptInjectIntoDynamicallyCreatedNodes() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- isJavascriptInjectIntoDynamicallyCreatedNodes() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isJavascriptInjectIntoDynamicallyCreatedNodes() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isJavascriptInjectIntoDynamicallyCreatedNodes() - Method in class org.owasp.csrfguard.CsrfGuard
- isJavascriptInjectIntoForms() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- isJavascriptInjectIntoForms() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isJavascriptInjectIntoForms() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isJavascriptInjectIntoForms() - Method in class org.owasp.csrfguard.CsrfGuard
- isJavascriptRefererMatchDomain() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
-
if the referer to the javascript must match domain
- isJavascriptRefererMatchDomain() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isJavascriptRefererMatchDomain() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isJavascriptRefererMatchDomain() - Method in class org.owasp.csrfguard.CsrfGuard
- isJavascriptRefererMatchProtocol() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
-
if the referer to the javascript must match the protocol of the domain
- isJavascriptRefererMatchProtocol() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isJavascriptRefererMatchProtocol() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isJavascriptRefererMatchProtocol() - Method in class org.owasp.csrfguard.CsrfGuard
- isNew() - Method in interface org.owasp.csrfguard.session.LogicalSession
-
Returns
trueif the client does not yet know about the session or if the client chooses not to join the session. - isPrintConfig() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- isPrintConfig() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isPrintConfig() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isPrintConfig() - Method in class org.owasp.csrfguard.CsrfGuard
- isProtected() - Method in class org.owasp.csrfguard.ProtectionResult
- isProtectedPage(String) - Method in class org.owasp.csrfguard.CsrfValidator
- isProtectedPageAndMethod(String, String) - Method in class org.owasp.csrfguard.CsrfValidator
- isProtectEnabled() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
-
The default behavior of CSRFGuard is to protect all pages.
- isProtectEnabled() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isProtectEnabled() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isProtectEnabled() - Method in class org.owasp.csrfguard.CsrfGuard
- isRotateEnabled() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- isRotateEnabled() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isRotateEnabled() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isRotateEnabled() - Method in class org.owasp.csrfguard.CsrfGuard
- isRotateEnabled(HttpServletRequest) - Method in class org.owasp.csrfguard.CsrfGuard
-
Rotation in case of AJAX requests is not supported currently because of possible race conditions.
- isTestPathRegex(String) - Static method in class org.owasp.csrfguard.util.RegexValidationUtil
-
see if a test path starts with ^ and ends with $ thus making it a regex
- isTokenPerPageEnabled() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- isTokenPerPageEnabled() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isTokenPerPageEnabled() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isTokenPerPageEnabled() - Method in class org.owasp.csrfguard.CsrfGuard
- isTokenPerPagePrecreate() - Method in class org.owasp.csrfguard.CsrfGuard
- isTokenPerPagePrecreateEnabled() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- isTokenPerPagePrecreateEnabled() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isTokenPerPagePrecreateEnabled() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isUsedMasterToken() - Method in class org.owasp.csrfguard.token.businessobject.TokenBO
- isUseNewTokenLandingPage() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
- isUseNewTokenLandingPage() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isUseNewTokenLandingPage() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isUseNewTokenLandingPage() - Method in class org.owasp.csrfguard.CsrfGuard
- isValid(HttpServletRequest, HttpServletResponse) - Method in class org.owasp.csrfguard.CsrfValidator
- isValidateWhenNoSessionExists() - Method in interface org.owasp.csrfguard.config.ConfigurationProvider
-
If csrf guard filter should check even if there is no session for the user Note: this changed around 2014/04, the default behavior used to be to not check if there is no session.
- isValidateWhenNoSessionExists() - Method in class org.owasp.csrfguard.config.NullConfigurationProvider
- isValidateWhenNoSessionExists() - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- isValidateWhenNoSessionExists() - Method in class org.owasp.csrfguard.CsrfGuard
-
If csrf guard filter should check even if there is no session for the user Note: this changed in 2014/04/20, the default behavior used to be to not check if there is no session.
J
- jarFile(Class) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
get a jar file from a sample class
- JavaScriptConfigParameters - Class in org.owasp.csrfguard.config.properties.javascript
- JavaScriptServlet - Class in org.owasp.csrfguard.servlet
- JavaScriptServlet() - Constructor for class org.owasp.csrfguard.servlet.JavaScriptServlet
- JsConfigParameter<T> - Class in org.owasp.csrfguard.config.properties.javascript
- JsConfigParameter() - Constructor for class org.owasp.csrfguard.config.properties.javascript.JsConfigParameter
L
- load(Properties) - Static method in class org.owasp.csrfguard.CsrfGuard
- Log - Class in org.owasp.csrfguard.action
- Log() - Constructor for class org.owasp.csrfguard.action.Log
- LOGICAL_SESSION_EXTRACTOR_NAME - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- LogicalSession - Interface in org.owasp.csrfguard.session
-
Represents a logical session that enables decoupling from the container's session implementation in case the client application uses a stateless approach (e.g.
- LogicalSessionExtractor - Interface in org.owasp.csrfguard.token.storage
M
- mapToString(Map) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
convert a set to a string (comma separate)
- MapToString(Map) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
Deprecated.use mapToString(map)
- MessageConstants - Class in org.owasp.csrfguard.util
-
MessageConstants - Maintains all the message constant literals.
- META_INF_CSRFGUARD_PROPERTIES - Static variable in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider
- MINUTE - org.owasp.csrfguard.config.overlay.ExpirableCache.ExpirableCacheUnit
-
minutes
- MISMATCH_MASTER_TOKEN_MSG - Static variable in class org.owasp.csrfguard.util.MessageConstants
- MISMATCH_PAGE_TOKEN_MSG - Static variable in class org.owasp.csrfguard.util.MessageConstants
N
- needToCheckIfFilesNeedReloading() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
- NEW_TOKEN_LANDING_PAGE - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- newInstance(Class<T>) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
Construct a class
- newInstance(Class<T>) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils
-
Construct a class
- newInstance(Class<T>, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
Construct a class
- normalizeResourceURI(String) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils
- normalizeResourceURI(HttpServletRequest) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils
- NullConfigurationProvider - Class in org.owasp.csrfguard.config
-
ConfigurationProviderwhich returns all null or empty values (except for the logger). - NullConfigurationProvider() - Constructor for class org.owasp.csrfguard.config.NullConfigurationProvider
- NullConfigurationProviderFactory - Class in org.owasp.csrfguard.config
-
TODO document
- NullConfigurationProviderFactory() - Constructor for class org.owasp.csrfguard.config.NullConfigurationProviderFactory
O
- onSessionCreated(LogicalSession) - Method in class org.owasp.csrfguard.CsrfGuard
-
Method to be called by a logical session implementation when a new session is created.
- onSessionDestroyed(LogicalSession) - Method in class org.owasp.csrfguard.CsrfGuard
-
Method to be called by a logical session implementation when a session is destroyed.
- OPTIONS - org.owasp.csrfguard.config.properties.HttpMethod
- org.owasp.csrfguard - package org.owasp.csrfguard
- org.owasp.csrfguard.action - package org.owasp.csrfguard.action
- org.owasp.csrfguard.config - package org.owasp.csrfguard.config
- org.owasp.csrfguard.config.overlay - package org.owasp.csrfguard.config.overlay
- org.owasp.csrfguard.config.properties - package org.owasp.csrfguard.config.properties
- org.owasp.csrfguard.config.properties.javascript - package org.owasp.csrfguard.config.properties.javascript
- org.owasp.csrfguard.exception - package org.owasp.csrfguard.exception
- org.owasp.csrfguard.http - package org.owasp.csrfguard.http
- org.owasp.csrfguard.servlet - package org.owasp.csrfguard.servlet
- org.owasp.csrfguard.session - package org.owasp.csrfguard.session
- org.owasp.csrfguard.token - package org.owasp.csrfguard.token
- org.owasp.csrfguard.token.businessobject - package org.owasp.csrfguard.token.businessobject
- org.owasp.csrfguard.token.mapper - package org.owasp.csrfguard.token.mapper
- org.owasp.csrfguard.token.service - package org.owasp.csrfguard.token.service
- org.owasp.csrfguard.token.storage - package org.owasp.csrfguard.token.storage
- org.owasp.csrfguard.token.storage.impl - package org.owasp.csrfguard.token.storage.impl
- org.owasp.csrfguard.token.transferobject - package org.owasp.csrfguard.token.transferobject
- org.owasp.csrfguard.util - package org.owasp.csrfguard.util
- OWASP_CSRF_GUARD_OVERLAY_PROPERTIES - Static variable in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider
-
ovrlay properties file
- OWASP_CSRF_GUARD_PROPERTIES - Static variable in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider
-
base properties file
P
- PAGE_TOKEN_SYNCHRONIZATION_TOLERANCE - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- PageTokenValue - Class in org.owasp.csrfguard.token.storage.impl
- PATCH - org.owasp.csrfguard.config.properties.HttpMethod
- POST - org.owasp.csrfguard.config.properties.HttpMethod
- prefixOrSuffix(String, String, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
get the prefix or suffix of a string based on a separator
- PRINT_ENABLED - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- printConfigIfConfigured(ServletContext, String) - Static method in class org.owasp.csrfguard.CsrfGuardServletContextListener
-
Prints the configuration to the ServletContext log file with the given prefix.
- PRNG - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- PRNG_PROVIDER - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- properties() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
get the properties object for this config file
- PropertiesConfigurationProvider - Class in org.owasp.csrfguard.config
-
ConfigurationProviderbased on aPropertiesobject. - PropertiesConfigurationProvider(Properties) - Constructor for class org.owasp.csrfguard.config.PropertiesConfigurationProvider
- PropertiesConfigurationProviderFactory - Class in org.owasp.csrfguard.config
-
TODO document
- PropertiesConfigurationProviderFactory() - Constructor for class org.owasp.csrfguard.config.PropertiesConfigurationProviderFactory
-
TODO document
- propertiesFromResourceName(String, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
read properties from a resource, don't modify the properties returned since they are cached
- propertiesHelper(boolean) - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
get the properties object for this config file
- propertiesOverrideMap() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
override map for properties for testing
- propertiesThreadLocalOverrideMap() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
override map for properties in thread local to be used in a web server or the like, based on property class this is static since the properties class can get reloaded, but these shouldn't
- PropertyUtils - Class in org.owasp.csrfguard.config.properties
- PROTECTED_METHODS - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- PROTECTED_PAGE_PREFIX - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- ProtectionResult - Class in org.owasp.csrfguard
- ProtectionResult(boolean, String) - Constructor for class org.owasp.csrfguard.ProtectionResult
- put(K, V) - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache
-
put a value into the cache, accept the default time to live for this cache
- put(K, V, int) - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache
-
put a value into the cache, accept the default time to live for this cache
- PUT - org.owasp.csrfguard.config.properties.HttpMethod
R
- RANDOM_TOKEN_FAILURE_MSG - Static variable in class org.owasp.csrfguard.util.MessageConstants
- RandomGenerator - Class in org.owasp.csrfguard.util
- readFileContent(String) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils
- readInputStreamContent(InputStream) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils
- readResourceFileContent(String) - Static method in class org.owasp.csrfguard.util.CsrfGuardUtils
- Redirect - Class in org.owasp.csrfguard.action
- Redirect() - Constructor for class org.owasp.csrfguard.action.Redirect
- REFERER_MATCH_DOMAIN - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
- REFERER_MATCH_PROTOCOL - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
- REFERER_PATTERN - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
- regenerateUsedPageToken(String, String, Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder
- regenerateUsedPageToken(String, String, Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder
-
Re-generates the value of a used page token
- regenerateUsedPageToken(String, Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken
- regenerateUsedPageToken(String, Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.Token
-
TODO is it worth the added performance penalty in case of a large application with a lot of pages? What would be the risk if this would be contextual to the assigned resource? Disposes the current token from all the stored valid page tokens, disregarding to which resource it was assigned and replaces with a newly generated one.
- RegexValidationUtil - Class in org.owasp.csrfguard.util
-
RegexValidationUtil - All functions related to regex operations.
- remove(String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder
- remove(String) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder
-
Removes all tokens related to a specific logical session key
- REQUEST_MISSING_TOKEN_MSG - Static variable in class org.owasp.csrfguard.util.MessageConstants
- RequestAttribute - Class in org.owasp.csrfguard.action
- RequestAttribute() - Constructor for class org.owasp.csrfguard.action.RequestAttribute
- retrieveConfig() - Static method in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProvider
-
retrieve a config from the config file or from cache
- retrieveConfig(Class<T>) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
retrieve a config from the config file or from cache
- retrieveConfiguration(Properties) - Method in interface org.owasp.csrfguard.config.ConfigurationProviderFactory
-
Called when retrieving the configuration
- retrieveConfiguration(Properties) - Method in class org.owasp.csrfguard.config.NullConfigurationProviderFactory
- retrieveConfiguration(Properties) - Method in class org.owasp.csrfguard.config.overlay.ConfigurationAutodetectProviderFactory
- retrieveConfiguration(Properties) - Method in class org.owasp.csrfguard.config.overlay.ConfigurationOverlayProviderFactory
- retrieveConfiguration(Properties) - Method in class org.owasp.csrfguard.config.PropertiesConfigurationProviderFactory
- retrieveContents(ConfigPropertiesCascadeBase) - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFile
-
get the contents from the config file
- retrieveFromConfigFileOrCache() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
see if there is one in cache, if so, use it, if not, get from config files
- retrieveFromConfigFiles() - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase
-
get the config object from config files
- Rotate - Class in org.owasp.csrfguard.action
- Rotate() - Constructor for class org.owasp.csrfguard.action.Rotate
- ROTATE - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- rotateAllPageTokens(String, Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder
- rotateAllPageTokens(String, Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder
-
Re-generates all existing tokens associated to the provided logical session key
- rotateAllPageTokens(Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken
- rotateAllPageTokens(Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.Token
-
Rotates all the existing page token values
- rotateAllTokens(String) - Method in class org.owasp.csrfguard.token.service.TokenService
-
Rotates (re-generates) the master token and all page tokens if the token-per-page functionality is enabled.
- rotateUsedToken(String, String, TokenBO) - Method in class org.owasp.csrfguard.token.service.TokenService
-
Rotates the used master or the currently requested page token if the token-per-page functionality is enabled.
S
- SECOND - org.owasp.csrfguard.config.overlay.ExpirableCache.ExpirableCacheUnit
-
seconds
- sendRedirect(String) - Method in class org.owasp.csrfguard.http.InterceptRedirectResponse
- setAttribute(String, Object) - Method in interface org.owasp.csrfguard.session.LogicalSession
-
Saves an object to the current session
- setContents(String) - Method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFile
- setMasterToken(String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken
- setMasterToken(String) - Method in interface org.owasp.csrfguard.token.storage.Token
-
Sets the new master token
- setMasterToken(String, String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder
- setMasterToken(String, String) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder
-
Sets or overwrites the master token bound to a specific session key.
- setName(String) - Method in class org.owasp.csrfguard.action.AbstractAction
- setName(String) - Method in interface org.owasp.csrfguard.action.IAction
-
Sets the name of the action
- setPageToken(String, String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken
- setPageToken(String, String) - Method in interface org.owasp.csrfguard.token.storage.Token
- setPageToken(String, String, String) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder
- setPageToken(String, String, String) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder
-
Sets the value of a page token based on the desired HTTP resource URI and logical session key
- setPageTokenIfAbsent(String, Supplier<String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken
- setPageTokenIfAbsent(String, Supplier<String>) - Method in interface org.owasp.csrfguard.token.storage.Token
- setPageTokens(String, Map<String, String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryTokenHolder
- setPageTokens(String, Map<String, String>) - Method in interface org.owasp.csrfguard.token.storage.TokenHolder
-
Sets/overwrites the page tokens with the provided values
- setPageTokens(Map<String, String>) - Method in class org.owasp.csrfguard.token.storage.impl.InMemoryToken
- setPageTokens(Map<String, String>) - Method in interface org.owasp.csrfguard.token.storage.Token
-
Initialize or overwrite the entire page-token map
- setParameter(String, String) - Method in class org.owasp.csrfguard.action.AbstractAction
- setParameter(String, String) - Method in interface org.owasp.csrfguard.action.IAction
-
Sets a parameter with a custom name and value
- setTokensGenerated(boolean) - Method in interface org.owasp.csrfguard.session.LogicalSession
-
Set whether the objects were generated or not.
- setUpdatedMasterToken(String) - Method in class org.owasp.csrfguard.token.businessobject.TokenBO
- setUpdatedPageToken(String, String) - Method in class org.owasp.csrfguard.token.businessobject.TokenBO
- setUsedMasterToken(String) - Method in class org.owasp.csrfguard.token.businessobject.TokenBO
- setUsedPageToken(String) - Method in class org.owasp.csrfguard.token.businessobject.TokenBO
- SimpleBooleanConfigParameter - Class in org.owasp.csrfguard.config.properties
- SimpleBooleanConfigParameter(String, boolean) - Constructor for class org.owasp.csrfguard.config.properties.SimpleBooleanConfigParameter
- SimpleConfigParameter<T> - Interface in org.owasp.csrfguard.config.properties
-
Interface describing a simple configuration parameter
- SimpleDurationParameter - Class in org.owasp.csrfguard.config.properties
- SimpleDurationParameter(String, Duration) - Constructor for class org.owasp.csrfguard.config.properties.SimpleDurationParameter
- SimpleIntConfigParameter - Class in org.owasp.csrfguard.config.properties
- SimpleIntConfigParameter(String, int) - Constructor for class org.owasp.csrfguard.config.properties.SimpleIntConfigParameter
- size(boolean) - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache
-
number of elements in map (and check for
- SOURCE_FILE_LOCATION - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
- split(String, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
Splits the provided text into an array, separators specified.
- splitPreserveAllTokens(String, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
Splits the provided text into an array, separators specified, preserving all tokens, including empty tokens created by adjacent separators.
- splitTrim(String, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
split a string based on a separator into an array, and trim each entry (see the Commons Util trim() for more details)
- splitTrim(String, String, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
split a string based on a separator into an array, and trim each entry (see the Commons Util trim() for more details)
- splitTrimToList(String, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
split a string based on a separator into an array, and trim each entry (see the Commons Util trim() for more details)
- staticToString() - Static method in class org.owasp.csrfguard.config.overlay.ExpirableCache
-
string representation of cache
- StringJsConfigParameter - Class in org.owasp.csrfguard.config.properties.javascript
- StringJsConfigParameter(String, String, String) - Constructor for class org.owasp.csrfguard.config.properties.javascript.StringJsConfigParameter
- stripLastSlashIfExists(String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
strip the last slash (/ or \) from a string if it exists
- substituteExpressionLanguage(String, Map<String, Object>) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeUtils
-
substitute an EL for objects.
- substituteExpressionLanguage(String, Map<String, Object>, boolean, boolean, boolean, boolean) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeUtils
-
substitute an EL for objects
T
- Token - Interface in org.owasp.csrfguard.token.storage
-
Interface used to interact with CSRF tokens
- TOKEN_HOLDER - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- TOKEN_LENGTH - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- TOKEN_MISSING_FROM_STORAGE_MSG - Static variable in class org.owasp.csrfguard.util.MessageConstants
- TOKEN_NAME - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- TOKEN_PER_PAGE - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- TOKEN_PER_PAGE_PRECREATE - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- TokenBO - Class in org.owasp.csrfguard.token.businessobject
- TokenBO() - Constructor for class org.owasp.csrfguard.token.businessobject.TokenBO
- TokenBO(String) - Constructor for class org.owasp.csrfguard.token.businessobject.TokenBO
- TokenBO(String, Map<String, String>) - Constructor for class org.owasp.csrfguard.token.businessobject.TokenBO
- TokenBO(Map<String, String>) - Constructor for class org.owasp.csrfguard.token.businessobject.TokenBO
- TokenHolder - Interface in org.owasp.csrfguard.token.storage
-
Interface used for storing and manipulating tokens across the solution.
- TokenMapper - Class in org.owasp.csrfguard.token.mapper
- TokenService - Class in org.owasp.csrfguard.token.service
- TokenService(CsrfGuard) - Constructor for class org.owasp.csrfguard.token.service.TokenService
- TokenTO - Class in org.owasp.csrfguard.token.transferobject
- TokenTO(String) - Constructor for class org.owasp.csrfguard.token.transferobject.TokenTO
- TokenTO(String, Map<String, String>) - Constructor for class org.owasp.csrfguard.token.transferobject.TokenTO
- TokenTO(Map<String, String>) - Constructor for class org.owasp.csrfguard.token.transferobject.TokenTO
- TokenUtils - Class in org.owasp.csrfguard.token
- toList(T...) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
return a list of objects from varargs.
- toString() - Method in class org.owasp.csrfguard.config.overlay.ExpirableCache
-
string representation of cache
- toString() - Method in class org.owasp.csrfguard.CsrfGuard
- toString() - Method in class org.owasp.csrfguard.token.transferobject.TokenTO
- toString() - Method in class org.owasp.csrfguard.util.CsrfGuardPropertiesToStringBuilder
- toString(InputStream, String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
Get the contents of an
InputStreamas a String. - toTransferObject(TokenBO) - Static method in class org.owasp.csrfguard.token.mapper.TokenMapper
- TRACE - org.owasp.csrfguard.config.properties.HttpMethod
- trim(String) - Static method in class org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeCommonUtils
-
trim whitespace from string
U
- UNPROTECTED_EXTENSIONS - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
- UNPROTECTED_METHODS - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- UNPROTECTED_PAGE_PREFIX - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
V
- validate(String) - Static method in enum org.owasp.csrfguard.config.properties.HttpMethod
- validate(Collection<String>) - Static method in enum org.owasp.csrfguard.config.properties.HttpMethod
- VALIDATE_WHEN_NO_SESSION_EXISTS - Static variable in class org.owasp.csrfguard.config.properties.ConfigParameters
- valueOf(String) - Static method in enum org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFileType
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.owasp.csrfguard.config.overlay.ExpirableCache.ExpirableCacheUnit
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.owasp.csrfguard.config.properties.HttpMethod
-
Returns the enum constant of this type with the specified name.
- valueOfIgnoreCase(String) - Static method in enum org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFileType
-
do a case-insensitive matching
- values() - Static method in enum org.owasp.csrfguard.config.overlay.ConfigPropertiesCascadeBase.ConfigFileType
-
Returns an array containing the constants of this enum type, in the order they are declared.
- values() - Static method in enum org.owasp.csrfguard.config.overlay.ExpirableCache.ExpirableCacheUnit
-
Returns an array containing the constants of this enum type, in the order they are declared.
- values() - Static method in enum org.owasp.csrfguard.config.properties.HttpMethod
-
Returns an array containing the constants of this enum type, in the order they are declared.
- verifyToken(HttpServletRequest, String, String, String) - Method in class org.owasp.csrfguard.token.service.TokenService
-
Verifies the validity of the current request.
W
- writeLandingPage(HttpServletResponse, String) - Method in class org.owasp.csrfguard.CsrfGuard
X
- X_REQUESTED_WITH - Static variable in class org.owasp.csrfguard.config.properties.javascript.JavaScriptConfigParameters
All Classes All Packages