CsrfProtection Class

Implementation of the stateless CSRF defense based on comparing hidden field value with cookie value.

Inheritance Hierarchy

System.Object
  CMS.Protection.Web.UI.CsrfProtection

Namespace: CMS.Protection.Web.UI
Assembly: CMS.Protection.Web.UI (in CMS.Protection.Web.UI.dll) Version: 12.0.0

Syntax

public sealed class CsrfProtection

The CsrfProtection type exposes the following members.

Constructors

	Name	Description
Public method	CsrfProtection

Fields

	Name	Description
Public field Static member	HIDDEN_FIELD_NAME	Defines the name of the hidden field used to store CSRF token. This constant is not intended for public use.

Methods

	Name	Description
Public method Static member	IsProtectionEnabled	Returns true when CSRF protection is enabled by web.config key.