This project is not covered by Drupal’s security advisory policy.
Provides an alternative CSRF protection mechanism for Drupal 7 forms, that depends on JavaScript but allows form HTML to be cached in reverse proxies or CDNs.
It also provides an alternative AJAX form submission mechanism which partly solves AJAX forms writing to form cache on every request which has also been fixed in Drupal core 8+.
CSRF tokens for links are cacheable in core from Drupal 8+ and the cache contexts and placeholders API allows form HTML to be cached in Drupal 8+ too, so this module is Drupal 7 only.
Supporting organizations:
Project information
- Project categories: Performance
- Created by catch on , updated
This project is not covered by the security advisory policy.
Use at your own risk! It may have publicly disclosed vulnerabilities.
