control: Generalize cookie and csrf handling

This commit is contained in:
Tom Wiesing 2023-01-05 15:59:24 +01:00
parent eb17dbe33f
commit 34bdb3cf24
No known key found for this signature in database
15 changed files with 122 additions and 44 deletions

View file

@ -0,0 +1,14 @@
package control
// CSRFCookie, CSRFCookieField, SessionCookie and SessionUserKey
// hold the names of the cookies and fields used for specific cookies.
//
// These are intentionally kept short to conserve bandwidth.
const (
CSRFCookie = "F" // CSRF cookie sent on a lot of requests
CSRFCookieField = "@" // form field name __should not be used by anything else__
// to pay respect
SessionCookie = "x" // name of the cookie to use ; to doubt
SessionUserKey = "@" // key within the session data to hold the username
)