0.9.1 Beta

Rating:        Based on 2 ratings
Reviewed:  2 reviews
Downloads: 1980
Released: Dec 15, 2008
Updated: Dec 15, 2008 by blowdart
Dev status: Beta Help Icon

Recommended Download

Application AntiCSRF.msi
application, 437K, uploaded Dec 15, 2008 - 1980 downloads

Release Notes

Public Beta

New Features

  • Marker interface to allow opt-out of pages which dot no use code behind

Features

  • An ASP.NET module to automatically protect against Cross Site Request Forgery
  • Configuration options for the CSRF cookie and form field names
  • Opt-out class attribute to allow a page to opt-out of CSRF protection

Reviews for this release

     
Excellent library! This sort of stuff is really hard to get right yourself.
by dot_NET_Junkie on Apr 20, 2011 at 9:55 AM
     
The idea is great, but this HttpModule reflects on the handling type *every* single request to find out if the request is to be CSRF protected using GetCustomAttributes, and does not cache the result of the check.. Seems wasteful
by andreakn on Jan 28, 2009 at 7:23 AM