Skip to content

Commit

Permalink
Merge pull request #19 from go-seatbelt/seatbelt/csrf-token-cookie-path
Browse files Browse the repository at this point in the history
seabelt: force csrf cookie to path '/'
  • Loading branch information
bentranter authored Jun 18, 2023
2 parents 8f50997 + 9d9ec75 commit 7d26ab0
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion seatbelt.go
Original file line number Diff line number Diff line change
Expand Up @@ -408,7 +408,7 @@ func New(opts ...Option) *App {
// Initialize the underlying chi mux so that we can setup our default
// middleware stack.
mux := chi.NewRouter()
mux.Use(csrf.Protect(signingKey))
mux.Use(csrf.Protect(signingKey, csrf.Path("/")))

sess := session.New(signingKey, session.Options{
Name: opt.SessionName,
Expand Down

0 comments on commit 7d26ab0

Please sign in to comment.