search

go-aah / aah

A secure, flexible, rapid Go web framework
https://aahframework.org
MIT License
690 stars 33 forks source link

Anti-CSRF - Expand the accepted referrers beyond the current host #230

Closed jeevatkm closed 5 years ago

jeevatkm commented 5 years ago

As of today aah Anti-CSRF security module only allows current host as accepted referrers. However real-world use needs further option to have list of trusted host/origins.

Added a configuration option for aah user so that they can provide list of trusted hosts-

security.anti_csrf.trusted_origins = ["domain1.com", "domain2.com", .... ]
jeevatkm commented 5 years ago

Its done 😄