Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

有个疑问,这里为什么不进行签名呢? #87

Closed
sullay opened this issue Jan 3, 2024 · 1 comment
Closed

有个疑问,这里为什么不进行签名呢? #87

sullay opened this issue Jan 3, 2024 · 1 comment

Comments

@sullay
Copy link
Contributor

sullay commented Jan 3, 2024

image
image

如果进行签名是不是可以防止子域存在存在xss漏洞修改了csrfToken的情况

@fengmk2
Copy link
Member

fengmk2 commented Jan 4, 2024

忘记了当时为啥没加。看到 pr 了,我会尽快 review。

@sullay sullay closed this as completed Jan 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants