Skip to content

fix: remove the NO-CSRF-CHECK header

Frank Bessou requested to merge topic/default/rm-no-csrf-check into branch/default

This header is not handled by the cubicweb. It was added as a potential solution to differentiate web clients from other consumers (Node or python client). But the chosen solution is to use an actual CSRF-TOKEN.

Closes #5 (closed).

Merge request reports