# CSRF token in HTML <meta> tag — app-family-specific naming convention.
# Matches <meta name="app-csrf" content="..."> and similar app-* prefixed
# names. Generic CSRF-meta conventions (csrf-token, _csrf, x-csrf-token,
# xsrf-token) are handled by csrf-meta-token.properties so this rule stays
# scoped to the app-* prefix family.
#
# Originally generated by an AI Assistant session on 2026-04-24 against the
# Web Performance demo app (which uses <meta name="app-csrf" ...>).
# Promoted from runtime to bundled 2026-05-06.

groups.count=1
detector.name=CSRF Meta App
search.pattern=name\="app-[\\w]+" content\="([A-Za-z0-9+/\=_-]{20,})"
detector=sread
