scottjehl/Respond

How to incorporate CSRF token into response.js

Opened this issue · 2 comments

roswork88 commented

Hi All,
I have been using response.js(v1.4.2) in my website but was flagged out cross-site request forgery. The recommendation was to make changes to contain a user-specific secret to prevent an attacker from making unauthorized request and an appropriate mitigation technique should be in place.

May I know how do I proceed to change for this version?

roswork88 commented

Hi All,
Any updates?

  • 👍1
thetumper commented

Bump! Same here. Need to know if any change will be made in respond.js? Or if this is incumbent on the user of the lib to deal with?