udo/uce
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add CSRF hidden field helper

Browse Source
This commit is contained in:
udo
2026-07-13 23:52:49 +00:00
parent 096138d6a1
commit 7fabccd90a
5 changed files with 44 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/lib/uri.cpp
+7
View File
@@ -885,6 +885,13 @@ String csrf_token(String session_name, String token_name)
return(context->session[key]);
}
String csrf_field(String session_name, String token_name, String field_name)
{
token_name = first(trim(token_name), "csrf_token");
field_name = first(trim(field_name), token_name);
return("<input type=\"hidden\" name=\"" + html_escape(field_name) + "\" value=\"" + html_escape(csrf_token(session_name, token_name)) + "\">");
}
bool csrf_valid(String submitted_token, String session_name, String token_name)
{
session_start(session_name);
src/lib/uri.h
+1
View File
@@ -34,6 +34,7 @@ void save_session_data(String session_id, StringMap data);
String session_start(String session_name = "uce-session");
void session_destroy(String session_name = "uce-session");
String csrf_token(String session_name = "uce-session", String token_name = "csrf_token");
String csrf_field(String session_name = "uce-session", String token_name = "csrf_token", String field_name = "");
bool csrf_valid(String submitted_token, String session_name = "uce-session", String token_name = "csrf_token");
void csrf_rotate(String session_name = "uce-session", String token_name = "csrf_token");
String ws_make_accept_key(String client_key);