Re: [Cppcms-users] Suggestion: warn if csrf enabled but missing
Brought to you by:
artyom-beilis
From: <ele...@ex...> - 2012-04-26 22:37:15
|
Cant you use request().getenv("HTTP_X_CSRFTOKEN"), in combination with session_interface::validate_csrf_token() for checking presence? > Also note, if the form update fails you should see a notice > about it in logs. Do you mean the "CSRF Validation Failed" message? |