Add CRSF (Cross Site Request Forgery) Protection

BaySchoolCS2 / ProjectRepo

Whirpl - A network designed with small communities in mind

MIT License

1 stars 9 forks source link

Add CRSF (Cross Site Request Forgery) Protection #69

Closed michardy closed 9 years ago

michardy commented 9 years ago

There is no CRSF protection to speak of.

fhebert-perkins commented 9 years ago

In theory it is now fully implemented as of 76a4e5e

michardy commented 9 years ago

I will work on figuring out a if CRSF attack works. Right now the upvote function which I am trying to attack does not even run when accessed correctly.