basho/riak_control — pull request #29 by cmeiklejohn (2012-07-16 21:26:28+00:00)
Title: Resolve base64 cookie truncation race condition.

Patch base64 encoding to strip padding, and remove non-url safe characters to prevent value from being stripped/truncated in cookie (stripped =, truncated / as separator).

Problematic because initial cookie value causes requests to fail when matching body and head, but on subsequent requests, truncated value becomes cookie value used in both body and head when performing CSRF request verification.