jooby-project / jooby

The modular web framework for Java and Kotlin
https://jooby.io
Apache License 2.0
1.71k stars 197 forks source link

Cross Site Request Forgery (CSRF) #158

Closed jknack closed 9 years ago

jknack commented 9 years ago
{
  use("*", new Csrf());
}

Every request will have access to csrf token. POST, PUT, PATCH and DELETE will be checked by the Csrf filter.

jknack commented 9 years ago

https://github.com/jooby-project/jooby/commit/1f082860bddac4ea2a9ecbed837f78e4f2449be3