CSRF Guard:Owasp.CsrfGuard.js编译错误

时间:2018-06-01 11:37:21

标签: csrf owasp

我正在尝试实施Owasp CARF库(3.0.0)。当我将Owasp.CsrfGuard.js文件放在WEB-INF /文件夹中并尝试部署应用程序时,我收到以下错误: Owasp.CsrfGuard.js上的意外标记%

我看到%DOMAIN_STRICT%和其他无法识别的变量。 我已将Javscriptservlet配置为:

<servlet>
         <servlet-name>JavaScriptServlet</servlet-name>
         <servlet-class>org.owasp.csrfguard.servlet.JavaScriptServlet</servlet-class>
         <init-param>
             <param-name>source-file</param-name>
             <param-value>/WEB-INF/Owasp.CsrfGuard.js</param-value>
         </init-param>
        <init-param>
             <param-name>inject-into-forms</param-name>
             <param-value>true</param-value>
         </init-param>
          <init-param>
             <param-name>inject-into-attributes</param-name>
             <param-value>false</param-value>
         </init-param>
        <init-param>
             <param-name>domain-strict</param-name>
             <param-value>true</param-value>
        </init-param>
        <init-param>
             <param-name>referer-pattern</param-name>
             <param-value>.*</param-value>
        </init-param>  
    </servlet>
    <servlet-mapping>
        <servlet-name>JavaScriptServlet</servlet-name>
        <url-pattern>/JavaScriptServlet</url-pattern>
    </servlet-mapping> 

使用的服务器是Weblogic 12.2.1.2

我是否需要配置任何内容。如何解决js错误??

0 个答案:

没有答案