passbe/beef-migration-test-2 — Issue #158: Add XSRF Nonce
Author: passbe
Created: 2011-12-08 10:04:22+00:00
State: open

Add a nonce to all UI requests to prevent XSRF. The nonce will be passed to the UI browser during the authentication.

The nonce will be passed in every HTTP Admin request and will be validated before all other validations and actions.

The aim of this task is to prevent XSRF.
Google Code Issue: http://code.google.com/p/beef/issues/detail?id=65