Plack middleware to block CSRF (cross-site request forgery)


Plack::Middleware::CSRFBlock helps blocking Cross-Site Request Forgeries, and can be used without any modifications to your application, in most cases.

When the application response Content-type header is "text/html" or "application/xhtml+xml", this middleware inserts a hidden input tag that contains a token string into all POST-forms found in the response body.

For every POST requests, this middleware ensures that the input parameters contain the correct token parameter. If not found, the middleware throws an HTTP error 403 (Forbidden) and the forged request does not even reach your application.

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload a screenshot

Hint: upload an image here from your clipboard with Ctrl-V


Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…

Install libplack-middleware-csrfblock-perl