esheri3/OWASP-CSRFGuard — pull request #16 by atwoodjw (2012-02-02 19:23:16+00:00)
Title: Adding org.owasp.csrfguard.Protect

The default behavior of CSRFGuard is to protect all pages. Pages marked as unprotected will not be protected. If the Protect property is enabled, this behavior is reversed. Pages must be marked as protected to be protected (org.owasp.csrfguard.protected.SecurePage=/SecurePage.do). All other pages will not be protected. This is useful when the CsrfGuardFilter is aggressively mapped (ex: /*), but you only want to protect a few pages.