Top "Csrf" questions

How to render CSRF input in twig?

I know there's the usual way to render CSRF token hidden input with form_rest, but is there a way …

php symfony csrf twig

Rails - How to add CSRF Protection to forms created in javascript?

I'm using backbone.js and it works great. but the forms I'm creating as a javascript template lacks the rails …

javascript ruby-on-rails ruby-on-rails-3 backbone.js csrf

How can I embed django csrf token straight into HTML?

within my django app I am storing strings of html in the db that will then be displayed on the …

django csrf django-csrf

Difference between CSRF and X-CSRF-Token

What is the difference between use X-CSRF-Token in an HTTP header or token in hidden field? When use hidden field …

http security csrf

symfony2 CSRF invalid

Okay, so today I updated my database with new information from our 'live' database... And since then I've been having …

symfony csrf

Are JSON web services vulnerable to CSRF attacks?

I am building a web service that exclusively uses JSON for its request and response content (i.e., no form …

http security csrf

Angular 6 does not add X-XSRF-TOKEN header to http request

I've read the docs and all the related questions on SO, but still Angular's XSRF mechanism isn't working for me: …

angular typescript angular6 csrf x-xsrf-token

How to get CSRF token Value at javaScript

I have requirement like that, when I send request, CSRF-token should be send with it. I Explore some SO questions, …

javascript jquery csrf wavemaker

CSRF state token does not match one provided FB PHP SDK 3.1.1 Oauth 2.0

My server logs show a "CSRF state token does not match one provided" error which seems to happen for almost …

facebook facebook-graph-api facebook-php-sdk oauth-2.0 csrf

In Spring-Security with Java Config, why does httpBasic POST want csrf token?

I am using Spring-Security 3.2.0.RC2 with Java config. I set up a simple HttpSecurity config that asks for basic auth …

post spring-security csrf basic-authentication spring-java-config