search

elixir-plug / plug

Compose web applications with functions
https://hex.pm/packages/plug
Other
2.84k stars 582 forks source link

Making CSRF unprotected methods configurable? #1134

Closed grantwest closed 11 months ago

grantwest commented 1 year ago

Would you be open to a PR that makes the csrf unprotected methods configurable?

The use case would be a rest api protected by including the x-csrf-token header. In this case we might as well protect the get method on our api pipeline.

josevalim commented 1 year ago

Yes!

josevalim commented 11 months ago

Closing this. If still interested, a PR is welcome!