{"action":"created","issue":{"url":"https://api.github.com/repos/expressjs/csurf/issues/49","labels_url":"https://api.github.com/repos/expressjs/csurf/issues/49/labels{/name}","comments_url":"https://api.github.com/repos/expressjs/csurf/issues/49/comments","events_url":"https://api.github.com/repos/expressjs/csurf/issues/49/events","html_url":"https://github.com/expressjs/csurf/issues/49","id":55869136,"number":49,"title":"RFC 6648: SHOULD NOT prefix their parameter names with \"X-\"","user":{"login":"arty-name","id":133055,"avatar_url":"https://avatars.githubusercontent.com/u/133055?v=3","gravatar_id":"","url":"https://api.github.com/users/arty-name","html_url":"https://github.com/arty-name","followers_url":"https://api.github.com/users/arty-name/followers","following_url":"https://api.github.com/users/arty-name/following{/other_user}","gists_url":"https://api.github.com/users/arty-name/gists{/gist_id}","starred_url":"https://api.github.com/users/arty-name/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/arty-name/subscriptions","organizations_url":"https://api.github.com/users/arty-name/orgs","repos_url":"https://api.github.com/users/arty-name/repos","events_url":"https://api.github.com/users/arty-name/events{/privacy}","received_events_url":"https://api.github.com/users/arty-name/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-01-29T08:15:33Z","updated_at":"2015-01-29T21:42:27Z","closed_at":null,"body":"When reading values from headers, csurf looks at `x-xsrf-token` and `x-csrf-token`. [RFC 6648 recommends against using `X-` prefix for non-standard HTTP headers](http://www.ietf.org/rfc/rfc6648.txt). Would be nice if csurf added support for headers `xsrf-token` and `csrf-token`, recommended their use in the documentation and linked to RFC 6648."},"comment":{"url":"https://api.github.com/repos/expressjs/csurf/issues/comments/72110091","html_url":"https://github.com/expressjs/csurf/issues/49#issuecomment-72110091","issue_url":"https://api.github.com/repos/expressjs/csurf/issues/49","id":72110091,"user":{"login":"gabeio","id":643410,"avatar_url":"https://avatars.githubusercontent.com/u/643410?v=3","gravatar_id":"","url":"https://api.github.com/users/gabeio","html_url":"https://github.com/gabeio","followers_url":"https://api.github.com/users/gabeio/followers","following_url":"https://api.github.com/users/gabeio/following{/other_user}","gists_url":"https://api.github.com/users/gabeio/gists{/gist_id}","starred_url":"https://api.github.com/users/gabeio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gabeio/subscriptions","organizations_url":"https://api.github.com/users/gabeio/orgs","repos_url":"https://api.github.com/users/gabeio/repos","events_url":"https://api.github.com/users/gabeio/events{/privacy}","received_events_url":"https://api.github.com/users/gabeio/received_events","type":"User","site_admin":false},"created_at":"2015-01-29T21:42:27Z","updated_at":"2015-01-29T21:42:27Z","body":"also added tests"}}