aramrami/OWASP-CSRFGuard — pull request #1 by skepticfx (2014-02-07 12:51:31+00:00)
Title: core: do not hardcode the CSRF token

Do a token pre-fetch on every page.

Instead of hard coding the CSRF token, we send a
POST request to fetch the token and populate the
JS variable.