Index: lams_central/conf/security/Owasp.CsrfGuard.properties =================================================================== diff -u -rba624f20ff2859345d001d3477b11a32fa0c4034 -r8da0b0783bbfac4bb1fed3a5a5811c2f418fcae7 --- lams_central/conf/security/Owasp.CsrfGuard.properties (.../Owasp.CsrfGuard.properties) (revision ba624f20ff2859345d001d3477b11a32fa0c4034) +++ lams_central/conf/security/Owasp.CsrfGuard.properties (.../Owasp.CsrfGuard.properties) (revision 8da0b0783bbfac4bb1fed3a5a5811c2f418fcae7) @@ -3,8 +3,10 @@ # By default do not check anything. ignoreAll is the same as filter coverage in web.xml org.owasp.csrfguard.unprotected.ignoreAll=*.do -# List of actions to check, each in a separate line prefixed with org.owasp.csrfguard.protected. -org.owasp.csrfguard.protected.saveprofile=/lams/saveprofile.do +# List of actions to check +# Each key goes into a separate line prefixed with org.owasp.csrfguard.protected. +# A key suffix must not contain a dot "." character +org.owasp.csrfguard.protected.centralSaveUserProfile=/lams/saveprofile.do # Actions to take when a CSRF attack is attempted org.owasp.csrfguard.action.Log=org.owasp.csrfguard.action.Log