I have an issue with OWASP CSRF. I implement OWASP CSRF to our java web site. CSRF works fine for JSP files, but not for js.

We have included js files to our application home page(index.jsp) using script tag with src attribute like below.

<script src="plugins/jquery/jquery.min.js"></script>
<script src="plugins/jquery-ui/jquery-ui.min.js"></script>
<script src="plugins/bootstrap/bootstrap.min.js"></script>

When we implement OWASP CSRF to our application, we encounter the following error while loading JS files : error:required token is missing from the request

I know we could make all js files to become unprotected with csrf properties file. But we want to be sure, if is there any way to set OWASP CSRF token to js files.

Could you suggest a solution? Thanks.