CSRF-Protector-PHP icon indicating copy to clipboard operation
CSRF-Protector-PHP copied to clipboard

Regex fix that failed to load cookie from store.

Open StotoV opened this issue 4 years ago • 1 comments

The regex did not take into account that spaces around the cookie entries are possible. This fix remedies that by expanding the regex rule in the javascript. Further documentation: https://developer.mozilla.org/en-US/docs/Web/API/Document/cookie

StotoV avatar Feb 19 '21 12:02 StotoV

I was working with this library today and I found your fix, but that fix is actually incorrect as well, the space is accounted the problem is the use of `` strings on js, instead of (?:^|;\s*)${CSRFP.CSRFP_TOKEN}=([^;]+)(;|$)

should be (?:^|;\\s*)${CSRFP.CSRFP_TOKEN}=([^;]+)(;|$)

ddiestra avatar Mar 17 '21 23:03 ddiestra