hiro/lack
1
0
Fork 0
mirror of https://github.com/vale981/lack synced 2025-03-05 09:21:39 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Change the default session key for CSRF token (Lack.Middleware.Csrf).

Browse source 
Keyword cannot be stored in RDBMS and a string would be better.
This commit is contained in:
Eitaro Fukamachi 2018-07-24 14:42:05 +09:00
parent 2c1c0df583
commit bde4285756
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/middleware/csrf.lisp
View file

@ -15,7 +15,7 @@
(defparameter *lack-middleware-csrf*
(lambda (app &key (block-app #'return-400) one-time
(session-key :csrf-token))
(session-key "_csrf_token"))
(lambda (env)
(let ((*csrf-session-key* session-key))
(block nil