how to test your jsf application for CSRF attacks.

I have an JSF(ADF) based application. how can i test application for CSRF and XSS ?

Is there any tool i can use it?