Protect login from CSRF attack?
Open
relates-to:spring-security
type: improvement
- Dominant language
- Groovy
- Stars
- 2.9k
- Forks
- 975
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 92
Description
AFAIKT, the grails' withForm method is not available when using /j_spring_security_check to log users in.
How can we protect our apps from CSRF during login when using grails-spring-security-core?
http://docs.spring.io/spring-security/site/docs/current/reference/html/csrf.html#csrf-login
Using:
grails 2.5.4
Thanks,
Ed
Contributor guide
Assessment
This issue has not been assessed yet.