Getting 403 error when using CSRF filter with tomcat 6.0.32
- by sps
This is my filer config in web.xml
<filter>
<filter-name>CSRFPreventionFilter</filter-name>
<filter-class>org.apache.catalina.filters.CsrfPreventionFilter</filter-class>
<init-param>
<param-name>entryPoints</param-name>
<param-value>/login<param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>CSRFPreventionFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter>
Am I missing something? Are any code-changes necessary to enable csrf protection in tomcat