-1

How to provide protection against Cross Site Request Forgery (CSRF) attacks for an old web application built on Java and struts2 framework?

Tried adding filter before servlet, stuck over there

James Z
  • 12,209
  • 10
  • 24
  • 44
Varun Pattar
  • 1

1 Answers1

0

Old application should use a token or tokenSession interceptor.

You can find details in my previous answer: Struts2 token interceptor: CSRF protection.

Roman C
  • 49,761
  • 33
  • 66
  • 176