csrf

csrf copied to clipboard

luizcmarin

vjik

Whether the package needs to be updated according to OWASP?

2

In the documentation you refer to [OWASP](https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html): now only `Synchronizer Token Pattern` and `Double Submit Cookie` are actual there. `HMAC Based Token Pattern` and `Encryption based Token Pattern` were removed....

solventt

vjik

added option to control body parsing

2

| Q | A | ------------- | --- | Is bugfix? | ❌ | New feature? | ✔️ | Breaks BC? | ❌ Example for #65

olegbaturin

Add Custom Request Headers for AJAX/API

4

https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html#employing-custom-request-headers-for-ajaxapi

olegbaturin

vjik