elmsln / haxcms-user-flow

user flow
Other
0 stars 1 forks source link

this.createParams.token support in new app #78

Closed btopro closed 2 years ago

btopro commented 2 years ago

current backend prints a createParams object w/ a token variable into the page via the PHP implementation. This token is then used on create and a few other transactions to ensure that it's valid for that specific browsing engagement w/ the jwt. It's an additional level of xss prevention and should be part of makeCall for anything that needs this additional token to secure the call.