ring-clojure ring-anti-forgery issues

ring-clojure / ring-anti-forgery

Ring middleware to prevent CSRF attacks

119 stars 26 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Removes dependecy of apache-commons to enable babashka users to use ring-anti-forgery

#28 m3tti opened 4 weeks ago
0
Update Clojure to 1.9.0 (addresses CVE-2017-20189)

#27 roberttaylor426 opened 8 months ago
1
Update minimum Clojure version and dependencies

#26 rome-user closed 1 year ago
1
Extract hiccup from anti-forgery-field

#25 lackita closed 4 years ago
2
Writing a warning when antiforgery token is missing in session.

#24 pavel-klavik opened 4 years ago
0
Anti forgery token fails and it keeps failing even with a refresh

#23 ekaitz-zarraga closed 5 years ago
4
Unable to terminate session

#22 martinskou opened 5 years ago
1
add :escaped-regx to allow callback post request

#21 pkvov closed 6 years ago
3
except uri allow callback post

#20 pkvov closed 6 years ago
2
Makes the anti-forgery token available to handlers from the request

#19 timothypratley closed 6 years ago
7
Should anti-forgery token be kept after valid POST?

#18 mainej opened 6 years ago
2
Add protocol to allow different token strategies

#17 chrisbetz closed 6 years ago
22
add encrypted token pattern to `wrap-anti-forgery`-middleware

#16 chrisbetz closed 6 years ago
7
Fix valid-request? function

#15 danielcompton closed 6 years ago
2
ignore path support for csrf tokens.

#14 ertugrulcetin closed 7 years ago
6
When does the token change, exactly? How to accommodate changes in persistent session, if at all?

#13 limist closed 8 years ago
7
Allow passing a predicate to skip protection on requests

#12 glittershark closed 8 years ago
6
New release with OPTIONS support

#11 msassak closed 8 years ago
3
Verification fails with latest versions of ring/compojure/anti-forgery

#10 sventech closed 9 years ago
4
Need disable-flag for test

#9 ayato-p closed 9 years ago
4
Don't validate OPTIONS requests with anti-forgery-token

#8 martintrojer closed 9 years ago
0
Add a fun to return the anti forgery

#7 paomian closed 9 years ago
2
Refactoring: extract constant.

#6 PetrGlad closed 7 years ago
2
Incuded an example of how to workaround the caveat

#5 jayp closed 6 years ago
0
Problem with Kerodon tests and 2 forms

#4 strika closed 9 years ago
3
1.0.0-RC1 ::anti-forgery-token

#3 whodidthis closed 10 years ago
3
ring-anti-forgery and web services

#2 mynomoto closed 8 years ago
7
Fix session assoc bug (session in responses were getting clobbered)

#1 ptaoussanis closed 10 years ago
1