VerifyOrigin v1.1.0 VerifyOrigin View Source
A Plug adapter to protect from CSRF attacks by verifying the Origin
header.
Options
:origin
- The origin of the server - requests from this origin will always proceed. Defaults to the default hostname configured for your application's endpoint.:strict
- Whether to reject requests that lack an Origin header. Defaults totrue
.:allow_safe
- Whether to enforce the strict mode for safe requests (GET, HEAD). Defaults totrue
.:fallback_to_referer
- If the Origin header is missing, fill it with the origin part of the Referer. Defaults tofalse
.