module

Lucky::ProtectFromForgery

Inherits Habitat::SettingsHelpers < Habitat::TempConfig

Protect from CSRF attacks

This module is automatically included in BrowserAction to protect from CSRF attacks.

Constants

ALLOWED_METHODS = ["GET", "HEAD", "OPTIONS", "TRACE"] of ::String

HABITAT_SETTINGS = [{decl: allow_forgery_protection : Bool = true, example: nil, validation: nil}] of Nil

PARAM_KEY = "_csrf"

SESSION_KEY = "X-CSRF-TOKEN"

configure

settings

settings