Re: [Cppcms-users] Suggestion: warn if csrf enabled but missing
Brought to you by:
artyom-beilis
|
From: <ele...@ex...> - 2012-04-26 22:37:15
|
Cant you use request().getenv("HTTP_X_CSRFTOKEN"), in combination with
session_interface::validate_csrf_token() for checking presence?
> Also note, if the form update fails you should see a notice
> about it in logs.
Do you mean the "CSRF Validation Failed" message?
|