Cross Site Request Forgery

[Parminder Dhillon]

Hi

I am using owasp cross site request forgery guard(CSRFGuard) in one of my web based application.But its implementation is not proper in many pages where i use sendReditect means i redirect application to other page and alson in those pages where i use window.open or window.location

Thanks
Parminder

[David O'Meara]

Do you have a question?

[Parminder Dhillon]

Yes my qustion is what to do in that case when redirecting to other page and we are using Cross site Request forger guard.As my application gives error in that case.

[Jeanne Boyarsky]

Originally posted by Parminder Dhillon:
where i use window.open or window.location

It's an open source filter. You can add to the code to include looking for javascript actions/urls and add the token that way.