data-method whitelist to block adding CSRF - #403

Open

bwillis wants to merge 5 commits into

rails:masterfrom

bwillis:add-csrf-href-whitelist

Commits on Feb 16, 2015

data-method whitelist to block adding CSRF
bwillis
committed
ca07d01
Fixing indentation
bwillis
committed
e2cd047
Changing configured href matching to domains
bwillis
committed
d7ada5e

Commits on Feb 18, 2015

Updating the tests to use more secure whitelist
bwillis
committed
3cfe37b
Avoid using string construction when setting html attributes
bwillis
committed
4866d8a