senchalabs/connect — Issue #504: csrf middleware for specific routes
Author: kof
Created: 2012-03-06 15:22:59+00:00
State: open

Hi,
I need to restrict csrf for some specific routes only, because I have a case were post requests are sent without csrf header and I have no influence on this. In my case facebook is sending a post request to the app in the "fb canvas" and there is no chance to pass csrf.

So isn't it better to be able to pass some routes where csrf should or should not work?

Best,
Oleg