CSRF-Protector-PHP
CSRF-Protector-PHP copied to clipboard
Create a version that works with stateless architecture implicitly
There was a request at OWASP conference to support stateless architecture where servers could be behind a load balancer.
In such case a common session storage might not be available; There could be a simple implementation of CSRFP which work on double submit cookie pattern
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#Double_Submit_Cookie
Rather than creating a version add support with in the library