adobo/agendav — Issue #18: CodeIgniter CSRF should be handled another way
Author: adobo
Created: 2011-11-17 09:10:31+00:00
State: open
Labels: want

Currently every request to AgenDAV is done by JS using one of the following two ways:

1. 'on-the-fly' form, generated just to have a CSRF token. Actions that use this method: resize, drag, delete...
2. A 'real' form, generated by server and returned to JS via AJAX

JS should be able to generate its own forms, and get CSRF token from browser cookies, for example. This can be achieved by using a framework like Backbone.js.