peng-ni

In the case when the CSRFP token is not at the beginning of the cookie header, the current regex will fail to detect the token correctly because of wrong slash...