CSRF-Protector-PHP icon indicating copy to clipboard operation
CSRF-Protector-PHP copied to clipboard

Create a version that works with stateless architecture implicitly

Open mebjas opened this issue 8 years ago • 1 comments

There was a request at OWASP conference to support stateless architecture where servers could be behind a load balancer.

In such case a common session storage might not be available; There could be a simple implementation of CSRFP which work on double submit cookie pattern

https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#Double_Submit_Cookie

mebjas avatar Nov 24 '17 04:11 mebjas

Rather than creating a version add support with in the library

mebjas avatar Feb 17 '18 08:02 mebjas