Skip to content

Allow forgery protection to be enabled/disabled app-wide - #1657

Merged
matthewmcgarvey merged 1 commit into
luckyframework:masterfrom
matthewmcgarvey:forgery
Jan 31, 2022
Merged

matthewmcgarvey merged 1 commit into
luckyframework:masterfrom
matthewmcgarvey:forgery

Conversation

@matthewmcgarvey

Copy link
Copy Markdown
Member

Purpose

Resolves #1656

A follow-up pr will need to be made to lucky_cli that adds configuration disabling it in the test environment.

Description

Needed by luckyframework/lucky_flow#137 to allow using things like links with different request methods that would normally use javascript to set the CSRF token on the request.

Checklist

  • - An issue already exists detailing the issue/or feature request that this PR fixes
  • - All specs are formatted with crystal tool format spec src
  • - Inline documentation has been added and/or updated
  • - Lucky builds on docker with ./script/setup
  • - All builds and specs pass on docker with ./script/test

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Allow CSRF to be disabled entirely

2 participants