Improve security for Phoenix v1.7.12

axelclark · Apr 20, 2024 · 49b91dc · 49b91dc
1 parent 010c613
commit 49b91dc
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/lib/ex338_web/user_auth.ex b/lib/ex338_web/user_auth.ex
@@ -61,6 +61,8 @@ defmodule Ex338Web.UserAuth do
   #     end
   #
   defp renew_session(conn) do
+    delete_csrf_token()
+
     conn
     |> configure_session(renew: true)
     |> clear_session()