This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/9.0.x by this push:
new 8c31d246e7 Document nonceRequestParameterName. Based on #553 by Mert
Ülkgün.
8c31d246e7 is described below
commit 8c31d246e7c5f3c5f3172ef677ae17a830ce699f
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Mon Oct 3 13:32:55 2022 +0100
Document nonceRequestParameterName. Based on #553 by Mert Ülkgün.
---
webapps/docs/changelog.xml | 9 +++++++++
webapps/docs/config/filter.xml | 6 ++++++
2 files changed, 15 insertions(+)
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index faa5d41063..d27ed6b481 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -146,6 +146,15 @@
</add>
</changelog>
</subsection>
+ <subsection name="Web applications">
+ <changelog>
+ <fix>
+ Documentation. Document the <code>nonceRequestParameterName</code>
+ attribute for the <code>CsrfPreventionFilter</code>. Based on
+ <pr>553</pr> by Mert Ülkgün. (markt)
+ </fix>
+ </changelog>
+ </subsection>
<subsection name="Other">
<changelog>
<update>
diff --git a/webapps/docs/config/filter.xml b/webapps/docs/config/filter.xml
index 4070f77e28..671de40d13 100644
--- a/webapps/docs/config/filter.xml
+++ b/webapps/docs/config/filter.xml
@@ -307,6 +307,12 @@
value of 5 will be used.</p>
</attribute>
+ <attribute name="nonceRequestParameterName" required="false">
+ <p>The name of the request parameter used for the nonce. If not set,
the
+ default value of <code>org.apache.catalina.filters.CSRF_NONCE</code>
+ will be used.</p>
+ </attribute>
+
<attribute name="randomClass" required="false">
<p>The name of the class to use to generate nonces. The class must be
an
instance of <code>java.util.Random</code>. If not set, the default
value
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
