Search results

v4.3.0 | In memory Token saving with no clean up leading to High Heap utilization and thus crashing JVM

Status: Open.

#350 In OWASP/www-project-csrfguard;

· Shishir53 opened on Jul 8, 2025

Minified JavaScript file (<code>csrfguard.min.js</code>) behaves differently than non-minified version (<code>csrfguard.js</code>)

Status: Open.

#341 In OWASP/www-project-csrfguard;

· nwaldispuehl opened on Apr 17, 2025

The isValidUrl method in csrfguard.js uses an insecure string-matching technique

security

Severity: Low

Status: Open.

#299 In OWASP/www-project-csrfguard;

· Shishir53 opened on Sep 10, 2024

Master csrf token incorrectly returned as page token

bugSomething isn't workingSomething isn't working

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#262 In OWASP/www-project-csrfguard;

· forgedhallpass opened on Apr 11, 2024

Create integration tests

enhancementNew feature or requestNew feature or request

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#192 In OWASP/www-project-csrfguard;

· forgedhallpass opened on Mar 27, 2023

Document the configurations options that enables overwriting values through the web.xml

documentationImprovements or additions to documentationImprovements or additions to documentation

good first issueGood for newcomersGood for newcomers

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#29 In OWASP/www-project-csrfguard;

· forgedhallpass opened on Oct 4, 2021

Lots of copied code from the Grouper repository

enhancementNew feature or requestNew feature or request

Priority: Low

Status: Open.

#25 In OWASP/www-project-csrfguard;

· forgedhallpass opened on Sep 15, 2021

Improve the test coverage

enhancementNew feature or requestNew feature or request

good first issueGood for newcomersGood for newcomers

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#24 In OWASP/www-project-csrfguard;

· forgedhallpass opened on Sep 15, 2021