[
https://issues.apache.org/jira/browse/COUCHDB-1102?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Alexander Shorin updated COUCHDB-1102:
--------------------------------------
Component/s: (was: Futon)
> Open to CSRF
> ------------
>
> Key: COUCHDB-1102
> URL: https://issues.apache.org/jira/browse/COUCHDB-1102
> Project: CouchDB
> Issue Type: Bug
> Components: HTTP Interface
> Reporter: Sam Bisbee
> Priority: Critical
>
> Currently there is no CSRF prevention in either Futon or the HTTP API.
> Discussion from the dev mailing list:
> http://mail-archives.apache.org/mod_mbox/couchdb-dev/201103.mbox/%3C20110321225441.GV22458@orbital%3E
> The proposal to resolve: https://gist.github.com/817490
> Adding this ticket to track progress.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
