[Checkins] SVN: Products.PluggableAuthService/trunk/ Add 'getCSRFToken' and 'checkCSRFToken' helpers + 'CSRFToken' view.

Matthew Wilkes matt at matthewwilkes.name
Fri Nov 16 01:27:53 UTC 2012



Tres Seaver wrote:
> +<browser:page
> +      for="*"
> +      name="csrf_token"
> +      class=".utils.CSRFToken"
> +      permission="zope.Public"
> +      />
> +

Is there any reason for making the user's CSRF token available on a URL?

Matt


More information about the checkins mailing list