Fork me on GitHub
Slack Archive

This page is not created by, affiliated with, or supported by Slack Technologies, Inc.

2018-05-13

Channels

#duct
<
2018-05-13
>
ddrbt16:05:29

I'm trying to set up CSRF protection in a Duct app. The relevant section of my config is this: 

:duct.server.http/http-kit  {}
 :duct.module.web/site       {}
 :duct.core/handler          {:middleware [#ig/ref :duct.middleware.web/format]}
 :duct.middleware.web/format {}
I see that :duct.module.web/site includes CSRF protection by default. Do I still need to manually wrap my routes using the wrap-routes macro from ring.middleware.defaults?