arneaase/CapRaffle — Issue #22: Prevent CSRF
Author: arneaase
Created: 2011-10-17 08:30:11+00:00
State: open

We should implement CSRF on all POST requests.

This would make the application more secure.

Blog post to implement CSRF on JSON requests:
http://haacked.com/archive/2011/10/10/preventing-csrf-with-ajax.aspx?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+haacked+%28you%27ve+been+HAACKED%29