Installation

go get github.com/cbonello/revel-csrf

revel run github.com/cbonello/revel-csrf/samples/demo

Configuration options

Operating instructions

package appimport (    "github.com/cbonello/revel-csrf"    "github.com/revel/revel")func init() {    // Filters is the default set of global filters.    revel.Filters = []revel.Filter{    revel.PanicFilter,             // Recover from panics and display an error page instead.    revel.RouterFilter,            // Use the routing table to select the right Action    revel.FilterConfiguringFilter, // A hook for adding or removing per-Action filters.    revel.ParamsFilter,            // Parse parameters into Controller.Params.    revel.SessionFilter,           // Restore and write the session cookie.    revel.FlashFilter,             // Restore and write the flash cookie.     csrf.CSRFFilter,              // CSRF prevention.    revel.ValidationFilter,        // Restore kept validation errors and save new ones from cookie.    revel.I18nFilter,              // Resolve the requested language    revel.InterceptorFilter,       // Run interceptors around the action.    revel.ActionInvoker,           // Invoke the action.    }}

<form action="/Hello" method="POST">    <input type="text" name="name" />    <input type="hidden" name="csrf_token" value="{{ .csrf_token }}" />    <button type="submit">Send</button></form>

function csrfSafeMethod(method) {    // HTTP methods that do not require CSRF protection.    return (/^(GET|HEAD|OPTIONS|TRACE)$/.test(method));}$.ajaxSetup({    crossDomain: false,    beforeSend: function(xhr, settings) {        if (!csrfSafeMethod(settings.type)) {            xhr.setRequestHeader("X-CSRFToken", {{ .csrf_token }});        }    }});$("#AJAXForm").submit(function(event){event.preventDefault();    $.ajax({        type: "POST",        url: "/Hello",        data: {            name: $("#AJAXFormName").val()        },        success: function(data) {            // Switch to HTML code returned by server on success.            jQuery("body").html(data);        },        error: function(jqXHR, status, errorThrown) {            alert(jqXHR.statusText);        },    });});

TODO

CONTRIBUTORS