[Cppcms-users] How come CSRF token through ajax POST doesn't fail?

[Petr J. <ele...@ex...>]

Hi,

I just wrote a simple ajax JS function (through JQuery) which calls
POSTS to a synchronous CPPCMS application, and I would have expected to
see an error due to the fact that I'm not sending a CSRF token with it.

How come?

I have csrf enabled, and "exposed" config options enabled in the CPPCMS
config file.

Petr


-- 
Please use PGP to encrypt your email to ensure our privacy is respected.