esheri3/OWASP-CSRFGuard — pull request #62 by skepticfx (2014-02-07 06:29:39+00:00)
Title: core: do not hardcode the CSRF token

Do a token pre-fetch on every page.

Instead of hard coding the CSRF token, we send a
POST request to fetch the token and populate the
JS variable.