Skip to main content


Block XSRF Attacks with minimal changes to your app

Changes for 0.0.19 - 2023-07-14T10:17:10+01:00

  • SECURITY FIX! when *not* using signed cookies, it was possible to bypass XSRFBlock by POSTing an empty form value and an empty cookie
  • bump minimum perl version to 5.12, most dependencies already require it