webmcp

diff framework/env/request/set_csrf_secret.lua @ 223:32ec28229bb5
Finished removing all references to cgi module (except demo-app); Removed partial loading mechanism
author: jbe
date: Fri Feb 27 21:49:00 2015 +0100 (2015-02-27)
parents: 9fdfb27f8e67
     1.1 --- a/framework/env/request/set_csrf_secret.lua	Fri Feb 27 17:18:08 2015 +0100
     1.2 +++ b/framework/env/request/set_csrf_secret.lua	Fri Feb 27 21:49:00 2015 +0100
     1.3 @@ -10,7 +10,7 @@
     1.4  function request.set_csrf_secret(secret)
     1.5    if
     1.6      request.get_action() and
     1.7 -    cgi.params._webmcp_csrf_secret ~= secret
     1.8 +    request._http_request.post_params["_webmcp_csrf_secret"] ~= secret
     1.9    then
    1.10      error("Cross-Site Request Forgery attempt detected");
    1.11    end