Java 17 Compatibility with csrfguard-4.1.4

[pcwd111]

Is csrfguard-4.1.4.jar compatible with Java 17?

[forgedhallpass]

There is a related issue to Java 17, which I have fixed, but it's not yet released. Feel free to build the latest version of the master branch, test it out and let me/us know if you are facing any additional issues.

[forgedhallpass]

Released under version 4.3.0

[bvjagan]

Hi there,
even with version 4.3.0 its not working with Java 17 with Tomcat 10.1 as the CsrfGuardHttpSessionListener implements javax.servlet.http.HttpSessionListener instead of jakarta.servlet.http.HttpSessionListener.
Am i missing something here? Appreciate for any input here.
Thank you.

[forgedhallpass]

Hello @bvjagan,

Have you seen: https://github.com/OWASP/www-project-csrfguard/releases/tag/4.3.0-jakarta
Issue reference: #176