This fix changes the model for error messaging in antiforgery. Now only the token store will report a detailed error message including the names of form field and cookie. Other components will give more generic errors and assume that this was handled by the token store. This way you still see an error if the user creates a token store that doesn't throw, but it's a generic error that doesn't give incorrect information. |
||
|---|---|---|
| samples/AntiforgerySample | ||
| src/Microsoft.AspNet.Antiforgery | ||
| test/Microsoft.AspNet.Antiforgery.Test | ||
| .gitattributes | ||
| .gitignore | ||
| Antiforgery.sln | ||
| CONTRIBUTING.md | ||
| LICENSE.txt | ||
| NuGet.Config | ||
| README.md | ||
| build.cmd | ||
| build.sh | ||
| global.json | ||
| makefile.shade | ||
README.md
Antiforgery
Antiforgery system for generating secure tokens to prevent Cross-Site Request Forgery attacks.
This project is part of ASP.NET 5. You can find samples, documentation and getting started instructions for ASP.NET 5 at the Home repo.