{"comment":{"url":"https://api.github.com/repos/redmatrix/redmatrix/comments/10684314","html_url":"https://github.com/redmatrix/redmatrix/commit/c6873529f47985da2bed92aed7c01af30133221d#commitcomment-10684314","id":10684314,"user":{"login":"dawnbreak","id":1450323,"avatar_url":"https://avatars.githubusercontent.com/u/1450323?v=3","gravatar_id":"","url":"https://api.github.com/users/dawnbreak","html_url":"https://github.com/dawnbreak","followers_url":"https://api.github.com/users/dawnbreak/followers","following_url":"https://api.github.com/users/dawnbreak/following{/other_user}","gists_url":"https://api.github.com/users/dawnbreak/gists{/gist_id}","starred_url":"https://api.github.com/users/dawnbreak/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dawnbreak/subscriptions","organizations_url":"https://api.github.com/users/dawnbreak/orgs","repos_url":"https://api.github.com/users/dawnbreak/repos","events_url":"https://api.github.com/users/dawnbreak/events{/privacy}","received_events_url":"https://api.github.com/users/dawnbreak/received_events","type":"User","site_admin":false},"position":null,"line":null,"path":"","commit_id":"c6873529f47985da2bed92aed7c01af30133221d","created_at":"2015-04-12T21:18:11Z","updated_at":"2015-04-12T21:18:11Z","body":"Often it is convention that GET requests should be \"safe\" and only retrieve data. That was one reason I changed the cloud file delete from a GET to a POST request and also added a token to the request to prevent CSRF weakness which could be easily abused. Removed filestorage's delete completely and let SabreDAV handle it all.\r\nAny ideas how we could add (1. POST and 2. CSRF token) to this ajax delete actions?"}}