Fix CSRF vulnerability in forms

lotusbase / lotus.au.dk

Lotus Base website

https://lotus.au.dk

MIT License

2 stars 1 forks source link

Fix CSRF vulnerability in forms #29

Closed terrymun closed 6 years ago

terrymun commented 6 years ago

Currently the forms that use POST action do not check if the user is making the request from the site itself. Implement double cookies check to ensure that the request originates from the same site.