cookie httponly

cookie httponly

Martin7483
Crossfire CMS
Posts: 373
Threads: 14
Joined: Sep 2015
Reputation: 20

09-29-2015, 03:00 AM

(09-29-2015, 02:45 AM)Narf Wrote:
(09-29-2015, 01:31 AM)Martin7483 Wrote: Will it make using CSRF and AJAX together impossible?

No ... you don't need to read the CSRF cookie with JS for that to work.

But if I post a form using AJAX, the CSRF token must be present or the post request will fail due to the missing token.

Messages In This Thread

cookie httponly - by Martin7483 - 09-29-2015, 01:31 AM

RE: cookie httponly - by Narf - 09-29-2015, 02:45 AM

RE: cookie httponly - by Martin7483 - 09-29-2015, 03:00 AM

RE: cookie httponly - by Narf - 09-29-2015, 04:36 AM

RE: cookie httponly - by Martin7483 - 09-29-2015, 04:44 AM

RE: cookie httponly - by Martin7483 - 09-29-2015, 05:33 AM

RE: cookie httponly - by Narf - 09-29-2015, 05:54 AM

RE: cookie httponly - by Martin7483 - 09-29-2015, 05:58 AM