| Modifier and Type | Interface and Description |
|---|---|
| public interface | Csrf
Cross Site Request Forgery (CSRF) interface with access to the CSRF header name and the CSRF token value. |
| public interface | Encoders
Interface that provides encoders to escape code in JavaScript, HTML, etc. Encoding data is a way to prevent XSS attacks by ensuring it is not misinterpreted as running code. |
| Modifier and Type | Annotation and Description |
|---|---|
| public @interface | CsrfProtected
A controller annotation to validate a CSRF token value received
in a request whenever the property |
| Modifier and Type | Class and Description |
|---|---|
| public class | CsrfValidationException
This exception is thrown by the MVC implementation if the CSRF token validation fails. |