# Detector for the generic CSRF Cookie-to-Header case, using "Csrf-token" as the cookie name
# The use case for this is documented abstractly on Wikipedia:
#  https://en.wikipedia.org/wiki/Cross-site_request_forgery
# there may or may not be actual frameworks using this specific cookie name.

detector=cad
detector.name=CSRF Cookie Detector
accept.field.name=X-Csrf-Token
accept.cookie.name=Csrf-token
transform-chain-1=URLDecode
transform-chain-2=NONE
