search

andreasnuesslein / swp_kp2_2012_gruppe1

4 stars 1 forks source link

fix CSRF problems.. play2 doesnt provide anything =( #51

Closed andreasnuesslein closed 12 years ago

andreasnuesslein commented 12 years ago

maybe use https://github.com/orefalo/play2-authenticitytoken

andreasnuesslein commented 12 years ago

due to the fact that play2 sucks and we dont want to reinvent the wheel any more than we already do: another wontfix

andreasnuesslein commented 12 years ago

(but this remains a security issue)