Forums / Cotonti / Core Labs / Ideas / General CRSF protection for AJAX GET requests

idea to always include crsf token in GETS

GHengeveld
#35223 2012-08-27 16:22

Interesting article, thanks. Generally I'm a fan of RESTful interfaces, but more often than not it's easier to deviate from the standard and use GET where POST is expected or use POST where PUT/DELETE would be prefered.