[Mojolicious] csrf vs testing

2020-11-03 Thread dal...@gmail.com
This might be an obvious question, but I haven't found a good answer I'm rewriting our old webapplications into Mojolicious. Goes just fine. Might as well add csrf protection (exactly when is csrf tokens recommended?) But then how do we test with csrf protection (via $v = $v->csrf_protect; from

[Mojolicious] Re: csrf vs testing

2020-11-03 Thread Sebastian Riedel
These CSRF protection features are mostly legacy features these days for backwards compatibility. Now we have SameSite cookies, to which modern browsers default. -- sebastian -- You received this message because you are subscribed to the Google Groups "Mojolicious" group. To unsubscribe from