ColdFusion - Prevention - Cross-site request forgeries (CSRF)

Question

I'm interested in learning how to prevent Cross-site request forgeries (CSRF) in my ColdFusion 9 application. I found a few tutorials online but none seem to be comprehensive. The best I've found is: http://www.mollerus.net/tom/blog/2009/01/an_easy_block_for_crosssite_request_forgeries_csrf.html But that's not a incredibly comprehensive or clear example.

Any tutorials, examples, or pointers available for preventing CSRF?

Thanks!

score 3 · Accepted Answer · edited Sep 25 '18 at 20:14

3

You should take a look at this link. ColdFusion 10 introduced two new functions to deal with CSRF; CSRFGenerateToken() and CSRFVerifyToken().

edited Sep 25 '18 at 20:14

James A Mohler

answered Jun 29 '17 at 16:55

BeefWellingtons

1 Answers1