Download
Archived! Now that all modern browsers implement SameSite cookies and the Origin HTTP header, this bundle is - in most cases - not necessary anymore. Learn how to protect your Symfony APIs from CSRF attacks. If you need to maintain old applications, take a look to DneustadtCsrfCookieBundle. This API Platform and Symfony bundle provides automatic Cross Site Request Forgery (CSRF or XSRF) protection for client-side applications. Despite the name, it works with any client-side technology including Angular, React, Vue.js, and jQuery. Actually, any JavaScript code issuing XMLHttpRequest or using the Fetch API can leverage this bundle.
Features
- To prevent CSRF attacks, the bundle will check that the header's value match the cookie's value
- Use Composer to install this bundle
- Configure URLs where the cookie must be set and that must be protected against CSRF attacks
- Examples available
- Integration with the Symfony Form Component
- Full Configuration
Project Samples
Categories
SecurityLicense
MIT LicenseFollow JavaScript CSRF Protection Bundle
Other Useful Business Software
CompanyCam is a photo-based solution created for contractors, by contractors.
Take unlimited photos—which are location and time-stamped, sent to the cloud, and stored securely. Every photo is organized by project and instantly available to your team, allowing you to see what’s going on anytime, anywhere. Annotate photos with drawings, arrows, comments, tags, and voice notes, and create project timelines, photo galleries, reports, and transformation photos through the app. Sharing photos with customers and insurance adjusters has never been easier, and keeping your entire process organized has never been simpler.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of JavaScript CSRF Protection Bundle!
