{"action":"closed","issue":{"url":"https://api.github.com/repos/esheri3/OWASP-CSRFGuard/issues/71","labels_url":"https://api.github.com/repos/esheri3/OWASP-CSRFGuard/issues/71/labels{/name}","comments_url":"https://api.github.com/repos/esheri3/OWASP-CSRFGuard/issues/71/comments","events_url":"https://api.github.com/repos/esheri3/OWASP-CSRFGuard/issues/71/events","html_url":"https://github.com/esheri3/OWASP-CSRFGuard/issues/71","id":90516674,"number":71,"title":"CSRFGuard reloads css, js files even though they are excluded in configuration","user":{"login":"marcfasel","id":737989,"avatar_url":"https://avatars.githubusercontent.com/u/737989?v=3","gravatar_id":"","url":"https://api.github.com/users/marcfasel","html_url":"https://github.com/marcfasel","followers_url":"https://api.github.com/users/marcfasel/followers","following_url":"https://api.github.com/users/marcfasel/following{/other_user}","gists_url":"https://api.github.com/users/marcfasel/gists{/gist_id}","starred_url":"https://api.github.com/users/marcfasel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marcfasel/subscriptions","organizations_url":"https://api.github.com/users/marcfasel/orgs","repos_url":"https://api.github.com/users/marcfasel/repos","events_url":"https://api.github.com/users/marcfasel/events{/privacy}","received_events_url":"https://api.github.com/users/marcfasel/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-06-23T23:28:55Z","updated_at":"2015-06-24T01:34:15Z","closed_at":"2015-06-24T01:34:15Z","body":"We included CSRFGuard in our Struts 1 application and now we can see a noticeable \"blip\" when each screen is rendered: it first renders fine, then you briefly see the page without any CSS (white background and only text) and then it goes back to normal.\r\nLooking at the network traffic the css and js files are reloaded once the CSRFGuard JavaScript adds the csrf token, which causes the blip. This is unacceptable for us. I marked css, js, etc files as unprotected in the csrfGuard properties but the token is still attached.\r\n\r\nThis seems to be a known issue: http://lists.owasp.org/pipermail/owasp-csrfguard/2013-October/000257.html\r\n\r\nIs there something I can do about that?"}}