From b20ed4ecc2e2d910e3e5e7b644b652a8eeb6c37e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=B4me=20Blanchard?= <jblanchard@jahia.com>
Date: Tue, 29 Apr 2025 11:49:13 +0200
Subject: [PATCH] Remove 'unload' event usage to 'pagehide' as mentioned in
 https://developer.mozilla.org/en-US/docs/Web/API/Window/unload_event#usage_notes

---
 csrfguard/src/main/resources/csrfguard.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/csrfguard/src/main/resources/csrfguard.js b/csrfguard/src/main/resources/csrfguard.js
index 964a70b..cae78b0 100644
--- a/csrfguard/src/main/resources/csrfguard.js
+++ b/csrfguard/src/main/resources/csrfguard.js
@@ -581,7 +581,7 @@ if (owaspCSRFGuardScriptHasLoaded !== true) {
                     });
 
                     formMutationObserver.observe(document, {attributes: false, childList: true, subtree: true});
-                    addEvent(window, 'unload', formMutationObserver.disconnect);
+                    addEvent(window, 'pagehide', formMutationObserver.disconnect);
                 } else {
                     addEvent(window, 'DOMNodeInserted', function (event) {
                         const target = event.target || event.srcElement;
@@ -610,7 +610,7 @@ if (owaspCSRFGuardScriptHasLoaded !== true) {
 
             var pageTokenWrapper = {pageTokens: {}};
 
-            addEvent(window, 'unload', EventCache.flush);
+            addEvent(window, 'pagehide', EventCache.flush);
 
             addEvent(window, 'DOMContentLoaded', function () {
                 isLoadedWrapper.isDomContentLoaded = true;