CodeIgniter Forums
Safari Autofill and CSRF - Printable Version

+- CodeIgniter Forums (https://forum.codeigniter.com)
+-- Forum: CodeIgniter 4 (https://forum.codeigniter.com/forumdisplay.php?fid=28)
+--- Forum: CodeIgniter 4 Support (https://forum.codeigniter.com/forumdisplay.php?fid=30)
+--- Thread: Safari Autofill and CSRF (/showthread.php?tid=91723)



Safari Autofill and CSRF - donpwinston - 09-25-2024

Safari's autofill feature breaks CodeIgniter's CSRF protection. I get a "The action you requested is not allowed" error message when I let Safari auto fill a onetime passcode. I spent many hours screwing around trying to fix this problem. If I paste the passcode in myself it works. I have no idea how to fix it.


RE: Safari Autofill and CSRF - ozornick - 09-25-2024

Disable autofill for current site?


RE: Safari Autofill and CSRF - donpwinston - 10-01-2024

(09-25-2024, 08:34 PM)ozornick Wrote: Disable autofill for current site?

Yes, but the user has to do it. All my app can do is warn them.