Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

added aft validation #514

Merged
merged 2 commits into from
Jun 1, 2023
Merged

added aft validation #514

merged 2 commits into from
Jun 1, 2023

Conversation

santhoshb-msft
Copy link
Contributor

added aft validation

@santhoshb-msft santhoshb-msft linked an issue May 31, 2023 that may be closed by this pull request
Solution vulnerable to Cross-Site Request Forgery (XSRF/CSRF) attacks #505
Closed
@santhoshb-msft santhoshb-msft mentioned this pull request May 31, 2023
Closed
@alexdrenea
Copy link
Collaborator

Reviewed this!
The Attribute was added on all the relevant controllers and the front-end calls were updated to send the header in the odd case where the POST was not submitting the form

@santhoshb-msft santhoshb-msft merged commit e16c398 into Azure:main Jun 1, 2023
@santhoshb-msft
Copy link
Contributor Author

Thank a lot for your help, @alexdrenea

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@alexdrenea alexdrenea alexdrenea approved these changes

@dstarr dstarr Awaiting requested review from dstarr

@code4clouds code4clouds Awaiting requested review from code4clouds

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Solution vulnerable to Cross-Site Request Forgery (XSRF/CSRF) attacks
2 participants
@santhoshb-msft @alexdrenea