Skip to content

Tags: zpas-lab/csrf

Tags

v1.3

Toggle v1.3's commit message
v1.3 includes an important security fix for users of Go 1.2 (Debian <…

…=7, Ubuntu <=14.10, etc.). This would cause token comparison to fail: https://groups.google.com/forum/#!topic/gorilla-web/G3aIFrm0LVI

- [bugfix] Token comparison could fail on versions of Go < 1.3.
- [ci] Updated Travis to use matrix builds.

v1.2

Toggle v1.2's commit message
Merge pull request gorilla#23 from gorilla/pass-field-name

[feature] csrf.TemplateField now uses custom FieldNames

v1.1

Toggle v1.1's commit message
v1.1

- Improved docs for development
- Changed header => form ordering

v1.0.2

Toggle v1.0.2's commit message
New features: support for MultiPart forms, customising cookie names.

Fixes: HTTP headers are inspected before POST form values.

v1.0.1

Toggle v1.0.1's commit message
v1.0.1

- store now private (minor API change)
- cookieStore now private (minor API change)
- csrf ServeHTTP method accepts pointer receiver (bug)

v1.0

Toggle v1.0's commit message
v1.0.