This project is read-only.

0.9.1 Beta

Rating:        Based on 2 ratings
Reviewed:  2 reviews
Downloads: 4473
Released: Dec 15, 2008
Updated: Dec 15, 2008 by blowdart
Dev status: Beta Help Icon

Recommended Download

Application AntiCSRF.msi
application, 437K, uploaded Dec 15, 2008 - 4473 downloads

Release Notes

Public Beta

New Features

  • Marker interface to allow opt-out of pages which dot no use code behind


  • An ASP.NET module to automatically protect against Cross Site Request Forgery
  • Configuration options for the CSRF cookie and form field names
  • Opt-out class attribute to allow a page to opt-out of CSRF protection

Reviews for this release

Excellent library! This sort of stuff is really hard to get right yourself.
by dot_NET_Junkie on Apr 20, 2011 at 10:55 AM
The idea is great, but this HttpModule reflects on the handling type *every* single request to find out if the request is to be CSRF protected using GetCustomAttributes, and does not cache the result of the check.. Seems wasteful
by andreakn on Jan 28, 2009 at 8:23 AM