Catalyst::Plugin::FormCanary

Catalyst::Plugin::FormCanary can check that forms are submitted from your site.
Download

Catalyst::Plugin::FormCanary Ranking & Summary

Advertisement

  • Rating:
  • License:
  • Perl Artistic License
  • Price:
  • FREE
  • Publisher Name:
  • Jonathan Rockway
  • Publisher web site:
  • http://search.cpan.org/~jrockway/

Catalyst::Plugin::FormCanary Tags


Catalyst::Plugin::FormCanary Description

Catalyst::Plugin::FormCanary can check that forms are submitted from your site. Catalyst::Plugin::FormCanary can check that forms are submitted from your site.SYNOPSIS use Catalyst qw(... Session ... FormCanary ...);FormCanary will examine your outgoing HTML and add a canary value to each form. When the form is submitted, the value of the canary is compared against one saved in the session at page generation time. If the canary that's sent doesn't match the one in the session (or there is no canary at all), the request is halted.There is no way to get params into your application without a correct canary. This is good for preventing "cross-site request attacks".This module is compatible with FormBuilder. Just drop it into your use line and have secure submit-once-only forms. Requirements: · Perl · Catalyst::Plugin::Session


Catalyst::Plugin::FormCanary Related Software