Re: [Cppcms-users] How come CSRF token through ajax POST doesn't fail?

[Artyom B. <art...@ya...>]

csrf is enabled as a part of session. if a session does not exists there is no 
csrf token is required.

-----srf token-------------------------
On Tue, May 28, 2013 5:31 PM IDT Petr Janda wrote:

>Hi,
>
>I just wrote a simple ajax JS function (through JQuery) which calls
>POSTS to a synchronous CPPCMS application, and I would have expected to
>see an error due to the fact that I'm not sending a CSRF token with it.
>
>How come?
>
>I have csrf enabled, and "exposed" config options enabled in the CPPCMS
>config file.
>
>Petr
>
>
>-- 
>Please use PGP to encrypt your email to ensure our privacy is respected.
>