Skip to content

What are the Slack Archives?

It’s a history of our time together in the Slack Community! There’s a ton of knowledge in here, so feel free to search through the archives for a possible answer to your question.

Because this space is not active, you won’t be able to create a new post or comment here. If you have a question or want to start a discussion about something, head over to our categories and pick one to post in! You can always refer back to a post from Slack Archives if needed; just copy the link to use it as a reference..

I was wondering, why there is no basic `CSRF token` protection for the search form? 🔍 👀 Doe

Chemaclass

Chemaclass Tech Lead Spryker Solution Partner Posts: 213 🧑🏻‍🚀 - Cadet

February 2023 in Help

I was wondering, why there is no basic CSRF token protection for the search form? 🔍 👀
Doesn’t that make sense? Or was it forgotten?

At least, I don’t see it in the demo-shop: https://www.de.b2c.demo-spryker.com/

0

Comments

vasily.rodin Freelance Spryker Developer Spryker Solution Partner Posts: 26 ✨ - Novice

February 2023 edited February 2023

Because search form sends a GET request. It doesn’t make sense to protect GET requests from CSRF attacks. More details: https://security.stackexchange.com/questions/115794/should-i-use-csrf-protection-for-get-requests

0