Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Default CSRF tokens to the root path "/" #1248

Merged
merged 1 commit into from
Aug 16, 2016
Merged

Default CSRF tokens to the root path "/" #1248

merged 1 commit into from
Aug 16, 2016

Commits on Aug 16, 2016

  1. Default CSRF tokens to the root path "/" 

    * The default path of cookies is the current path making the request
  * e.g. an AJAX request made from http://example.com/foo/bar would be /foo
  * This causes multiple CSRF tokens to build up as you navigate a site
  * This will cause errors if the CSRF tokens have different values, and an invalid token is sent.
* Closes #1247
    @MaxGabriel
    MaxGabriel committed Aug 16, 2016
    Configuration menu
    Copy the full SHA
    e628736 View commit details
    Browse the repository at this point in the history