Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add note regarding CSRF protection to documentation/step-by-step walkthrough #270

Closed
quintstoffers opened this issue Dec 3, 2013 · 1 comment
Closed

Add note regarding CSRF protection to documentation/step-by-step walkthrough #270

quintstoffers opened this issue Dec 3, 2013 · 1 comment

Comments

@quintstoffers
Copy link

The /authorize implementation described in the step-by-step walkthrough allows for CSRF, where an attacker would be able to forge a request bypassing the authorization form.

It would be great if a note could be added so that future developers are aware of this. An example implementation would also be incredibly useful.
@bshaffer bshaffer mentioned this issue Dec 17, 2013
Open
@bshaffer
Copy link
Owner

closed in favor of above issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@bshaffer @quintstoffers