Cross-site request forgery protection

A computer system for Cross-Site Request Forgery (XSRF) protection comprising:

• a server computer having a processor;
• and
• a memory in communication with the processor, the memory storing instructions related to:
• a configurator module to configure an XSRF protection framework at the server computer, the XSRF protection framework used by one or more web applications residing at the server computer;
• an encoder module to encode an XSRF token valid for a lifecycle of a user session by adding a secure identifier to uniform resource locators (URLs) of the one or more web applications residing at the server computer;
• and
• a validator module to validate the XSRF token, when processing a request to a protected URL in the user session.

An article of manufacture including a non-transitory computer readable storage medium to tangibly store instructions, which when executed by a computer, cause the computer to:

• receive a configuration for an XSRF protection framework at a server computer, the XSRF protection framework used by one or more web applications residing at the server computer;
• encode an XSRF token valid for a lifecycle of a user session by adding a secure identifier to uniform resource locators (URLs) of the one or more web applications residing at the server computer;
• and
• validate the XSRF token, when processing a request to a protected URL in the user session.