Re: CSRF protection question

2013-08-19 Thread James Roper
Thanks very much for your reply, knowing the reasoning behind the decisions made really helps. Cheers, James On 17 August 2013 11:56, Russell Keith-Magee wrote: > > On Thu, Aug 15, 2013 at 7:21 PM, James Roper wrote: > >> Hi, >> >> I'm a core dev on Play Framework, and I'm currently looking c

Re: CSRF protection question

2013-08-16 Thread Russell Keith-Magee
On Thu, Aug 15, 2013 at 7:21 PM, James Roper wrote: > Hi, > > I'm a core dev on Play Framework, and I'm currently looking closely at our > CSRF protection and making improvements, and so I'm looking carefully at > what other frameworks do because when it comes to security, it's easy to > miss som

CSRF protection question

2013-08-15 Thread James Roper
Hi, I'm a core dev on Play Framework, and I'm currently looking closely at our CSRF protection and making improvements, and so I'm looking carefully at what other frameworks do because when it comes to security, it's easy to miss something. I'd like to get a better understanding of the reason