Skip to content

Commit 953b687

Browse files
aramramiaramrami
authored
Add files via upload
Add project from https://github.com/aramrami/OWASP-CSRFGuard
1 parent 3f1655c commit 953b687

File tree

96 files changed

+19978
-23
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

96 files changed

+19978
-23
lines changed

‎assets/images/credentials_included.png

172 KB
Loading

‎assets/images/csrfguard_3.1.0.png

66.6 KB
Loading

‎assets/images/csrfguard_in_action.png

547 KB
Loading

‎assets/images/mature_projects.png

14.9 KB
Loading

‎assets/images/owasp_breakers_small.png

1.39 KB
Loading

‎assets/images/owasp_builders_small.png

1.43 KB
Loading

‎assets/images/owasp_tool_project.png

7.82 KB
Loading

‎assets/images/what_is_csrf_attacks_1.png

290 KB
Loading

‎assets/images/what_is_csrf_attacks_2.png

301 KB
Loading

‎assets/images/what_is_csrf_attacks_3.png

306 KB
Loading

‎assets/images/what_is_csrf_attacks_4.png

306 KB
Loading

‎assets/images/what_is_csrf_attacks_5.png

306 KB
Loading

‎assets/images/what_is_csrf_attacks_6.png

307 KB
Loading

‎assets/images/what_is_csrf_attacks_7.png

306 KB
Loading

‎csrfguard-test/misc/eclipse/README.txt

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
These files put in the csrfguard-test dir work for eclipse kepler and m2e maven plugin

‎csrfguard-test/pom.xml

Lines changed: 148 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,148 @@
1+
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
2+
<modelVersion>4.0.0</modelVersion>
3+
<groupId>org.owasp</groupId>
4+
<artifactId>csrfguard-test</artifactId>
5+
<version>3.1.0-SNAPSHOT</version>
6+
<packaging>war</packaging>
7+
<name>OWASP CSRFGuard Test Application</name>
8+
<description>OWASP CSRFGuard is a library that implements a variant of the synchronizer token pattern to mitigate the risk of Cross-Site Request Forgery (CSRF) attacks.</description>
9+
<url>https://www.owasp.org/index.php/Category:OWASP_CSRFGuard_Project</url>
10+
<organization>
11+
<name>OWASP</name>
12+
<url>http://www.owasp.org</url>
13+
</organization>
14+
<licenses>
15+
<license>
16+
<name>BSD License</name>
17+
<url>http://www.opensource.org/licenses/bsd-license.php</url>
18+
</license>
19+
</licenses>
20+
<scm>
21+
<url>https://github.com/esheri3/OWASP-CSRFGuard</url>
22+
<connection>https://github.com/esheri3/OWASP-CSRFGuard.git</connection>
23+
</scm>
24+
<developers>
25+
<developer>
26+
<id>esheri3</id>
27+
<name>Eric Sheridan</name>
28+
<email>eric@infraredsecurity.com</email>
29+
</developer>
30+
</developers>
31+
<properties>
32+
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
33+
</properties>
34+
<dependencies>
35+
<dependency>
36+
<groupId>javax.servlet</groupId>
37+
<artifactId>servlet-api</artifactId>
38+
<version>2.5</version>
39+
<scope>provided</scope>
40+
</dependency>
41+
<dependency>
42+
<groupId>javax.servlet.jsp</groupId>
43+
<artifactId>jsp-api</artifactId>
44+
<version>2.1</version>
45+
<scope>provided</scope>
46+
</dependency>
47+
<dependency>
48+
<groupId>org.owasp</groupId>
49+
<artifactId>csrfguard</artifactId>
50+
<version>${project.version}</version>
51+
</dependency>
52+
</dependencies>
53+
<build>
54+
<plugins>
55+
<plugin>
56+
<groupId>org.apache.maven.plugins</groupId>
57+
<artifactId>maven-compiler-plugin</artifactId>
58+
<version>3.1</version>
59+
<configuration>
60+
<fork>true</fork>
61+
<optimize>true</optimize>
62+
<showDeprecation>true</showDeprecation>
63+
<source>1.6</source>
64+
<target>1.6</target>
65+
<verbose>true</verbose>
66+
</configuration>
67+
</plugin>
68+
<plugin>
69+
<groupId>org.apache.maven.plugins</groupId>
70+
<artifactId>maven-jar-plugin</artifactId>
71+
<version>2.2</version>
72+
<configuration>
73+
<archive>
74+
<manifest>
75+
<addDefaultImplementationEntries>true</addDefaultImplementationEntries>
76+
<addDefaultSpecificationEntries>false</addDefaultSpecificationEntries>
77+
</manifest>
78+
<manifestEntries>
79+
<Project-Lead>Eric Sheridan (eric@infraredsecurity.com)</Project-Lead>
80+
<Url>${project.url}</Url>
81+
</manifestEntries>
82+
</archive>
83+
</configuration>
84+
</plugin>
85+
<plugin>
86+
<groupId>org.apache.maven.plugins</groupId>
87+
<artifactId>maven-javadoc-plugin</artifactId>
88+
<version>2.9</version>
89+
<configuration>
90+
</configuration>
91+
<executions>
92+
<execution>
93+
<id>javadoc-jar</id>
94+
<phase>package</phase>
95+
<goals>
96+
<goal>jar</goal>
97+
</goals>
98+
</execution>
99+
</executions>
100+
</plugin>
101+
<plugin>
102+
<groupId>org.apache.maven.plugins</groupId>
103+
<artifactId>maven-source-plugin</artifactId>
104+
<version>2.2.1</version>
105+
<configuration>
106+
<encoding>UTF-8</encoding>
107+
<charset>UTF-8</charset>
108+
<archive>
109+
<manifest>
110+
<addDefaultImplementationEntries>true</addDefaultImplementationEntries>
111+
<addDefaultSpecificationEntries>false</addDefaultSpecificationEntries>
112+
</manifest>
113+
<manifestEntries>
114+
<Project-Lead>Eric Sheridan (eric@infraredsecurity.com)</Project-Lead>
115+
<Url>${project.url}</Url>
116+
</manifestEntries>
117+
</archive>
118+
</configuration>
119+
<executions>
120+
<execution>
121+
<id>attach-sources</id>
122+
<phase>package</phase>
123+
<goals>
124+
<goal>jar-no-fork</goal>
125+
</goals>
126+
</execution>
127+
</executions>
128+
</plugin>
129+
<plugin>
130+
<groupId>org.apache.maven.plugins</groupId>
131+
<artifactId>maven-surefire-plugin</artifactId>
132+
<version>2.12.4</version>
133+
<configuration>
134+
<skip>true</skip>
135+
</configuration>
136+
</plugin>
137+
<plugin>
138+
<groupId>org.apache.tomcat.maven</groupId>
139+
<artifactId>tomcat7-maven-plugin</artifactId>
140+
<version>2.1</version>
141+
<configuration>
142+
<path>/</path>
143+
<port>8000</port>
144+
</configuration>
145+
</plugin>
146+
</plugins>
147+
</build>
148+
</project>

‎csrfguard-test/src/main/java/org/owasp/csrfguard/test/HelloServlet.java

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
package org.owasp.csrfguard.test;
2+
3+
import java.io.IOException;
4+
import java.io.PrintWriter;
5+
6+
import javax.servlet.ServletException;
7+
import javax.servlet.http.HttpServlet;
8+
import javax.servlet.http.HttpServletRequest;
9+
import javax.servlet.http.HttpServletResponse;
10+
11+
/**
12+
* Servlet implementation class HelloServlet
13+
*/
14+
public class HelloServlet extends HttpServlet {
15+
private static final long serialVersionUID = 1L;
16+
17+
/**
18+
* Default constructor.
19+
*/
20+
public HelloServlet() {
21+
// TODO Auto-generated constructor stub
22+
}
23+
24+
/**
25+
* @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse response)
26+
*/
27+
@Override
28+
protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
29+
doPost(request, response);
30+
}
31+
32+
/**
33+
* @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse response)
34+
*/
35+
@Override
36+
protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
37+
response.setContentType("text/plain");
38+
39+
PrintWriter writer = new PrintWriter(response.getOutputStream());
40+
writer.println("Hello World!");
41+
writer.close();
42+
}
43+
44+
}

‎csrfguard-test/src/main/webapp/WEB-INF/classes/Owasp.CsrfGuard.overlay.properties

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
2+
org.owasp.csrfguard.configuration.provider.factory=org.owasp.csrfguard.config.overlay.ConfigurationOverlayProviderFactory
3+
4+
org.owasp.csrfguard.JavascriptServlet.refererPattern = http://localhost:80.*
5+
6+
org.owasp.csrfguard.unprotected.Default=%servletContext%/
7+
org.owasp.csrfguard.unprotected.Upload=%servletContext%/upload.html
8+
org.owasp.csrfguard.unprotected.JavaScriptServlet=%servletContext%/JavaScriptServlet
9+
org.owasp.csrfguard.unprotected.Ajax=%servletContext%/ajax.html
10+
org.owasp.csrfguard.unprotected.Error=%servletContext%/error.html
11+
org.owasp.csrfguard.unprotected.Index=%servletContext%/index.html
12+
org.owasp.csrfguard.unprotected.JavaScript=%servletContext%/javascript.html
13+
org.owasp.csrfguard.unprotected.Tag=%servletContext%/tag.jsp
14+
org.owasp.csrfguard.unprotected.Redirect=%servletContext%/redirect.jsp
15+
org.owasp.csrfguard.unprotected.Forward=%servletContext%/forward.jsp
16+
org.owasp.csrfguard.unprotected.Session=%servletContext%/session.jsp
17+
org.owasp.csrfguard.unprotected.Favicon=%servletContext%/favicon.ico

0 commit comments

Comments
 (0)