Cacheable CSRF protection

Component ID

2124307

Component name

Cacheable CSRF protection

Component type

module

Maintenance status

Development status

Component security advisory coverage

not-covered

Downloads

794

Component created

Component changed

Component body

Provides an alternative CSRF protection mechanism for Drupal forms, that depends on JavaScript but allows form HTML to be cached in reverse proxies or CDNs.

It also provides an alternative AJAX form submission mechanism which partly solves AJAX forms writing to form cache on every request which has been fixed in Drupal core 8.x.