6 commits

Author	SHA1	Message	Date
Konstantin Haase	8a2514674c	xhr requests cannot be used for the json attack, fixes #39	2013-03-01 15:43:27 +11:00
Bjørge Næss	fd4687f331	Bypass referer check if Origin header is given	2012-09-05 10:08:09 +02:00
Fojas	34003df86e	Fixed call strip call on missing Content-Type header	2011-08-11 09:38:46 -05:00
Konstantin Haase	7798cda967	pending specs for json csrf	2011-06-20 15:47:58 +02:00
Konstantin Haase	86e9828c23	add pending tests	2011-06-19 15:35:58 +02:00
Konstantin Haase	62dd794011	add JSON CSRF protection	2011-06-19 15:26:39 +02:00