CSRF token expired when page is left open

CSRF token expired when page is left open

kenjis
Administrator
Posts: 3,681
Threads: 97
Joined: Oct 2014
Reputation: 228

01-17-2024, 09:32 PM

Quote:If you use Session, be sure to use Session based CSRF protection. Cookie based CSRF protection will not prevent Same-site attacks. See GHSA-5hm8-vh6r-2cjq for details.
https://www.codeigniter.com/user_guide/l...on-methods

ci-phpunit-test | CodeIgniter Testing Guide | CodeIgniter 3 to 4 Upgrade Helper

Messages In This Thread

CSRF token expired when page is left open - by gabriel_fucci - 01-09-2024, 10:56 AM

RE: CSRF token expired when page is left open - by ozornick - 01-09-2024, 11:40 PM

RE: CSRF token expired when page is left open - by gabriel_fucci - 01-10-2024, 06:41 AM

RE: CSRF token expired when page is left open - by ozornick - 01-10-2024, 12:42 PM

RE: CSRF token expired when page is left open - by Valkhan - 01-17-2024, 09:44 AM

RE: CSRF token expired when page is left open - by kenjis - 01-17-2024, 09:35 PM

RE: CSRF token expired when page is left open - by kenjis - 01-17-2024, 09:32 PM