antirez/lamernews — Issue #67: Remove CSRF Protection / Creating LN Bookmarklets / Exposing JSON API
Author: Marak
Created: 2011-10-25 10:04:39+00:00
State: open

Is the CSRF protection for article submissions really necessary? What is the concern here? Does it really matter if an article submission comes from a page which is not on lamernews.com?

I'm making a bookmarklet that helps users submit content to LamerNews and I can't seem to mitigate the CSRF protection and get my bookmarklet to submit an article.

Is there a JSON API available yet for doing article submissions? I don't mind requiring users to authenticate for an API call, but I couldn't find anything.