How to handle CSRF protection for a Chrome Extension?

Hello - I'm working on a Chrome Extension that will inject some JavaScript into a third-party webpage in order to add some additional functionality. For part of this functionality, I need to be able to do HTTP POST back to my server. I've added it as a trusted origin in my settings.py:

Re: How to handle CSRF protection for a Chrome Extension?

0, 2018 at 1:54:36 AM UTC+2, Greg Barker wrote: > >> Hello - >> >> I'm working on a Chrome Extension that will inject some JavaScript into a >> third-party webpage in order to add some additional functionality. >> >> For part of this functionality, I need

Re: How to handle CSRF protection for a Chrome Extension?

suggestion in this Stackoverflow post did do the trick: https://stackoverflow.com/questions/30871033/django-rest-framework-remove-csrf On Wed, Feb 21, 2018 at 11:00 AM, Greg Barker <fle...@fletchowns.net> wrote: > Thanks again for the reply Norbert. I'm not currently doing any GET > reque

Re: How to handle CSRF protection for a Chrome Extension?

20, 2018 at 2:26 AM, Norbert Mate <mt.norb...@gmail.com> >> wrote: >> >>> This also might be useful: >>> https://gist.github.com/bengolder/aa9033efc8959dc38e5d >>> >>> >>> On Tuesday, February 20, 2018 at 1:54:36 AM UTC+2, Greg Barker wrote: