Closed tommket closed 4 years ago
It wasn’t ported.
Is there any chance of https://github.com/SnoozeTime/actix-csrf getting some more support?
@tommket what do you mean with support ? You can ask the author https://github.com/SnoozeTime if you're missing any features.
@0xpr03 I mean if it could become one of the other actix-... crates the same way the other middleware crates got created and continually maintained? There is an open issue https://github.com/SnoozeTime/actix-csrf/issues/1 where the author recently stated that he is waiting for someone sufficiently knowledgeable in actix and rust to review his code, before he is willing to release it as a crate. So pls anyone contributing to actix-... code and willing to review it would be welcome.
Just as a note: I'm using the SameSite attribute as CSRF prevention.
@0xpr03 Yes I read about that too, but that does not help with subdomains.
i guess there is nothing to do in actix-web repo
@tommket I'd recommend to ask in the actix Gitter chat and see if you'll find some people to help you with this project.
Does anyone know why it was removed?
Where is the CSRF middleware for actix-web 1.0?