2019-11-07 -> 2021-06-25

A tool to help protect your light application against csrf attacks.

This is a Light plugin.

This is part of the universe framework.

It's a simpler alternative to the Light_Csrf service.

As of 2019-11-07, this is the preferred alternative as for csrf protection implementation in the Light framework.

Using the planet installer via light-cli

lt install Ling.Light_CsrfSimple

Using the uni command.

uni import Ling/Light_CsrfSimple

Or just download it and place it where you want otherwise.

• Light_CsrfSimple api (generated with DocTools)
• Pages
  • Conception notes
  • Events
• Services
• Related

This plugin provides the following services:

• csrf_simple (returns a LightCsrfSimpleService instance)

Here is an example of the service configuration:

csrf_simple:
    instance: Ling\Light_CsrfSimple\Service\LightCsrfSimpleService
    methods:
        setContainer:
            container: @container()

# --------------------------------------
# hooks
# --------------------------------------
$events.methods_collection:
    -
        method: registerListener
        args:
            event: Ling.Light.on_route_found
            listener:
                instance: @service(csrf_simple)
                callable_method: onRouteFound

• Light_CsrfSession plugin (preferred because simpler to develop with)
• Light_Csrf, a more complex/secure csrf protection plugin

• 1.2.11 -- 2021-06-25

  • fix service config event not being namespaced with galaxy

• 1.2.10 -- 2021-05-31

  • Removing trailing plus in lpi-deps file (to work with Light_PlanetInstaller:2.0.0 api

• 1.2.9 -- 2021-05-11

  • checkpoint commit

• 1.2.8 -- 2021-05-03

  • Update dependencies to Ling.Light_Events (pushed by SubscribersUtil)

• 1.2.7 -- 2021-05-03

  • Update dependencies to Ling.Light_Events (pushed by SubscribersUtil)

• 1.2.6 -- 2021-05-03

  • Update dependencies to Ling.Light_Events (pushed by SubscribersUtil)

• 1.2.5 -- 2021-03-15

  • update planet to adapt Ling.Light:0.70.0

• 1.2.4 -- 2021-03-05

  • update README.md, add install alternative

• 1.2.3 -- 2020-12-08

  • Fix lpi-deps not using natsort.

• 1.2.2 -- 2020-12-04

  • Add lpi-deps.byml file

• 1.2.1 -- 2019-12-09

  • update Related section in README.md

• 1.2.0 -- 2019-11-08

  • add LightCsrfSimpleService->getOldToken

• 1.1.1 -- 2019-11-08

  • fix functional typo, event Ling.Light_CsrfSimple.on_csrf_token_regenerated not dispatched

• 1.1.0 -- 2019-11-08

  • add event Ling.Light_CsrfSimple.on_csrf_token_regenerated

• 1.0.0 -- 2019-11-07

  • initial commit