Slim-Csrf

Slim-Csrf copied to clipboard

Passing CSRF token in header not working on NGINX server, as underscores in header are not supported

1

@blizzz @akrabat regarding this PR to enable csrf token check in http header: https://github.com/slimphp/Slim-Csrf/pull/175 It seems that the CSRF keys have an underscore in them, and NGINX does not support...

JordanRifaey

Note that this PR builds on #176.

akrabat

As we have the changelog file, it should reflect reality!

akrabat

Sending CSRF name/value as request header does not work with Apache

2

Slim-Csrf supports reading the token names and values from HTTP request headers, which is useful when using AJAX and such. This functionality is implemented here: https://github.com/slimphp/Slim-Csrf/blob/1.x/src/Guard.php#L449 Unfortunately, this does not...

euantorano