Skip to content

Log events when CSRF token is missing or has invalid value #80

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
php-coder opened this issue Jan 29, 2015 · 0 comments
Closed

Log events when CSRF token is missing or has invalid value #80

php-coder opened this issue Jan 29, 2015 · 0 comments
Assignees
@cssru
Labels
area/security techdebt
Milestone
0.4

Comments

@php-coder
Copy link
Owner

After enabling CSRF protection (#25) Spring Security may generates MissingCsrfTokenException or InvalidCsrfTokenException. We need to log these events in suspicious_activities table.
@php-coder php-coder changed the title Log event when CSRF token is missing or has invalid value Log events when CSRF token is missing or has invalid value Jan 29, 2015
@php-coder php-coder modified the milestone: 0.4 Jul 24, 2015
@php-coder php-coder self-assigned this Jul 24, 2015
@php-coder php-coder assigned cssru and unassigned php-coder Feb 15, 2016
This was referenced Mar 5, 2016
Open
Open
Open
@Shkarin Shkarin mentioned this issue Aug 23, 2017
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@cssru cssru

Labels
area/security techdebt
Projects
None yet
Milestone
0.4
Development

No branches or pull requests
2 participants
@php-coder @cssru