diff -r 000000000000 -r ca3c7dd220fe java/nekurak.net-web/src/java/cz/frantovo/nekurak/posluchac/OchranaProtiCSRF.java --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/java/nekurak.net-web/src/java/cz/frantovo/nekurak/posluchac/OchranaProtiCSRF.java Sat Jan 15 18:14:15 2011 +0100 @@ -0,0 +1,23 @@ +package cz.frantovo.nekurak.posluchac; + +import javax.servlet.http.HttpSessionEvent; +import javax.servlet.http.HttpSessionListener; + +/** + * + * @author fiki + */ +public class OchranaProtiCSRF implements HttpSessionListener { + + public static final String NAZEV_ATRIBUTU = "CSRF_TOKEN"; + + @Override + public void sessionCreated(HttpSessionEvent se) { + String csrfToken = String.valueOf(Math.random()); + se.getSession().setAttribute(NAZEV_ATRIBUTU, csrfToken); + } + + @Override + public void sessionDestroyed(HttpSessionEvent se) { + } +}