Re: CSRF Question

[Ben Bangert]

On Apr 18, 2008, at 9:04 AM, Jonathan Vanasco wrote:

Django has a neat middleware component

http://www.djangoproject.com/documentation/csrf/

has anyone thought of porting this to pylons?

http://pylonshq.com/docs/module-pylons.decorators.secure.html
http://pylonshq.com/docs/module-webhelpers.rails.secure_form_tag.html

Cheers,
Ben

WebHelpers has a secure_form tag, and there's a secure_form decorator in Pylons that checks and ensures the validity of the secure_form:

smime.p7s
Description: S/MIME cryptographic signature