4 commits

Author	SHA1	Message	Date
Jared Szechy	09305a0909	Fix handling of no session (#4731)	2020-11-04 09:09:30 -08:00
basherru	df702a16ce	check if session object is not empty in csrf protection (#4672) ... Co-authored-by: basherru <alexander.baz@okwork.io>	2020-08-19 10:39:30 -07:00
Mike Perham	eb2a6ab497	refactoring	2020-06-03 22:11:18 -07:00
Mike Perham	47bc87034f	Refactor and clean up CSRF protection code ... 1. Remove unused methods 2. Remove unused and unnecessary features 3. Add basic tests The session token is stored server-side and never given to the client. A masked token is generated for each request which can be inserted into forms to be POSTed.	2020-06-03 16:06:36 -07:00