我正在尝试实施Owasp CARF库(3.0.0)。当我将Owasp.CsrfGuard.js文件放在WEB-INF /文件夹中并尝试部署应用程序时,我收到以下错误: Owasp.CsrfGuard.js上的意外标记%
我看到%DOMAIN_STRICT%和其他无法识别的变量。 我已将Javscriptservlet配置为:
<servlet>
<servlet-name>JavaScriptServlet</servlet-name>
<servlet-class>org.owasp.csrfguard.servlet.JavaScriptServlet</servlet-class>
<init-param>
<param-name>source-file</param-name>
<param-value>/WEB-INF/Owasp.CsrfGuard.js</param-value>
</init-param>
<init-param>
<param-name>inject-into-forms</param-name>
<param-value>true</param-value>
</init-param>
<init-param>
<param-name>inject-into-attributes</param-name>
<param-value>false</param-value>
</init-param>
<init-param>
<param-name>domain-strict</param-name>
<param-value>true</param-value>
</init-param>
<init-param>
<param-name>referer-pattern</param-name>
<param-value>.*</param-value>
</init-param>
</servlet>
<servlet-mapping>
<servlet-name>JavaScriptServlet</servlet-name>
<url-pattern>/JavaScriptServlet</url-pattern>
</servlet-mapping>
使用的服务器是Weblogic 12.2.1.2
我是否需要配置任何内容。如何解决js错误??