CSRF attack prevention without middleware

noir-clojure / lib-noir

A set of libraries for ring apps, including stateful sessions.

Eclipse Public License 1.0

481 stars 47 forks source link

CSRF attack prevention without middleware #32

Closed runexec closed 11 years ago

runexec commented 11 years ago

@yogthos I took your advice, but I actually built the library for use outside of Ring's middleware.

What do you think? => https://github.com/runexec/ring-csrf

yogthos commented 11 years ago

@runexec, it looks alright to me, but it doesn't seem very different from the ring-anti-forgery. Maybe it would be make sense to update that library with the added features?