Rails 4 skipping protect_from_forgery for API actions

Rails 4 skipping protect_from_forgery for API actions

ruby-on-rails json api ruby-on-rails-4 csrf

json

Using MVC3's AntiForgeryToken in HTTP GET to avoid Javascript CSRF vulnerability

json asp.net-mvc-3 csrf antiforgerytoken

json

CSRF and RESTful API (symfony2, php)

php json rest symfony csrf

json

Why json hijacking can be prevented using POST method?

javascript json ajax security csrf

json

access laravel app from android app with csrf token

php android json laravel csrf

json

getting csrf tokens for json post requests to a rails app

json ruby-on-rails-3.1 csrf rest-client

json

Posting a JSON model to ASP.Net MVC3 with Anti-forgery token

jquery ajax json asp.net-mvc-3 csrf

json

JSON Stringify 400 Bad Request on AJAX POST

jquery ajax json post csrf

json

Rails, OAuth, and CSRF protection

ruby-on-rails json rest oauth csrf

json

Rails automatically update CSRF token for repeat JSON request

jquery ruby-on-rails json security csrf

json

Can the source of a JavaScript file loaded into a web-page via a <script> tag be read by other JavaScript in that page?

javascript json security csrf csrf-protection

json

Does JWT share/store the secret for signing on both the client and server?

json rest security csrf jwt

json

How to access a CSRF token in a Spring controller unit test?

json spring unit-testing csrf spring-mvc-test

json

AJAX and CSRF in Spring

json spring jquery csrf spring-json

json

Is it safe to serve jsonp if I require authentication headers?

javascript json jsonp csrf

json