search

Home  >  Q&A  >  body text

Laravel has a setting to exclude verification tokens, but will not verifying cause any security issues?

Laravel has a setting to exclude verification tokens, which is the following:

class VerifyCsrfToken extends BaseVerifier
{

    protected $except = [
        'stripe/*',
    ];
}

You can fill in the URL of the non-verified token. Some places cannot be excluded. If not excluded, a token error will be returned. However, will there be any security issues after being excluded?

天蓬老师天蓬老师2753 days ago468

reply all(1)I'll reply

  • 巴扎黑

    巴扎黑2017-05-16 16:52:34

    This is used to prevent CSRF attacks. You can search for the specific harm of CSRF attacks by yourself

    reply
    0
  • Cancelreply