This parameter indicates the database password. Here is an example. CSRFDetector.dbmsPass=changeMe If omitted, blank password is used.