OWASP / www-project-csrfguard

The aim of this project is to protect Java applications against CSRF attacks with the use of Synchronizer Tokens
https://owasp.org/www-project-csrfguard/
BSD 3-Clause "New" or "Revised" License
77 stars 38 forks source link

Updated documentation - Open Issue #272

Open swetak20 opened 1 month ago

swetak20 commented 1 month ago

Updated Documentation as per Issue #36

swetak20 commented 1 month ago

I was working on migrating the contents to https://owasp.org/www-project-csrfguard/ and I believe it is currently generated from index.md. Could you confirm if this is correct?

swetak20 commented 1 month ago

I was checking the link in https://wiki.owasp.org/index.php/CSRFGuard_3_Token_Injection before migrating them, and they redirect to a 404. Example - Owasp.CsrfGuard.Test

Could you suggest what should we cite the sources as in the updated documentation?

forgedhallpass commented 1 month ago

I was working on migrating the contents to https://owasp.org/www-project-csrfguard/ and I believe it is currently generated from index.md. Could you confirm if this is correct?

Yes, the documentation is generated from the markdown files.

forgedhallpass commented 1 month ago

I was checking the link in https://wiki.owasp.org/index.php/CSRFGuard_3_Token_Injection before migrating them, and they redirect to a 404. Example - Owasp.CsrfGuard.Test

Could you suggest what should we cite the sources as in the updated documentation?

The test properties files can be found in the following folder in the repository: https://github.com/OWASP/www-project-csrfguard/tree/master/csrfguard-test/csrfguard-test-jsp/src/main/webapp/WEB-INF/classes The properties file also contains a lot of documentation in-line.

swetak20 commented 1 month ago

@forgedhallpass I've made the requested changes. Please review the updates and let me know if there are any further adjustments needed.