Fix #68: Add the CsrfHeaderMiddleware middleware to use custom HTTP…

… header to prevent forgery of requests, add the `CsrfMiddleware::withSafeMethods()` method to configure a custom safe HTTP methods list
yiisoft · Nov 14, 2024 · 962b006 · 962b006
1 parent 38ea3c5
commit 962b006
Show file tree

Hide file tree

Showing 13 changed files with 848 additions and 48 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 ## 2.1.2 under development
 
+- New #68: Add the `CsrfHeaderMiddleware` middleware to use custom HTTP header to prevent forgery of requests (@olegbaturin)
+- Enh #68: Add the `CsrfMiddleware::withSafeMethods()` method to configure a custom safe HTTP methods list (@olegbaturin)
 - Chg #71: Deprecate `CsrfMiddleware` in favor of `CsrfTokenMiddleware` (@ev-gor)
 
 ## 2.1.1 May 08, 2024