{"action":"created","issue":{"url":"https://api.github.com/repos/NancyFx/Nancy/issues/1873","labels_url":"https://api.github.com/repos/NancyFx/Nancy/issues/1873/labels{/name}","comments_url":"https://api.github.com/repos/NancyFx/Nancy/issues/1873/comments","events_url":"https://api.github.com/repos/NancyFx/Nancy/issues/1873/events","html_url":"https://github.com/NancyFx/Nancy/pull/1873","id":63307837,"number":1873,"title":"Get provided CSRF-tokens either from formdata or request header","user":{"login":"loftum","id":373220,"avatar_url":"https://avatars.githubusercontent.com/u/373220?v=3","gravatar_id":"","url":"https://api.github.com/users/loftum","html_url":"https://github.com/loftum","followers_url":"https://api.github.com/users/loftum/followers","following_url":"https://api.github.com/users/loftum/following{/other_user}","gists_url":"https://api.github.com/users/loftum/gists{/gist_id}","starred_url":"https://api.github.com/users/loftum/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/loftum/subscriptions","organizations_url":"https://api.github.com/users/loftum/orgs","repos_url":"https://api.github.com/users/loftum/repos","events_url":"https://api.github.com/users/loftum/events{/privacy}","received_events_url":"https://api.github.com/users/loftum/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-03-20T21:07:46Z","updated_at":"2015-03-24T18:52:41Z","closed_at":"2015-03-24T18:52:40Z","pull_request":{"url":"https://api.github.com/repos/NancyFx/Nancy/pulls/1873","html_url":"https://github.com/NancyFx/Nancy/pull/1873","diff_url":"https://github.com/NancyFx/Nancy/pull/1873.diff","patch_url":"https://github.com/NancyFx/Nancy/pull/1873.patch"},"body":"It would be nice to post CSRF-tokens either as form data or as a request header.\r\n\r\nOn validation Csrf.cs could look in both form data and request header for the provided token, before validating against the cookie token.\r\n\r\nThis would really make our day, especially when posting json-data from JavaScript, as we would not have to deal with the CSRF-token in the posted data at all."},"comment":{"url":"https://api.github.com/repos/NancyFx/Nancy/issues/comments/85640850","html_url":"https://github.com/NancyFx/Nancy/pull/1873#issuecomment-85640850","issue_url":"https://api.github.com/repos/NancyFx/Nancy/issues/1873","id":85640850,"user":{"login":"horsdal","id":676126,"avatar_url":"https://avatars.githubusercontent.com/u/676126?v=3","gravatar_id":"","url":"https://api.github.com/users/horsdal","html_url":"https://github.com/horsdal","followers_url":"https://api.github.com/users/horsdal/followers","following_url":"https://api.github.com/users/horsdal/following{/other_user}","gists_url":"https://api.github.com/users/horsdal/gists{/gist_id}","starred_url":"https://api.github.com/users/horsdal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/horsdal/subscriptions","organizations_url":"https://api.github.com/users/horsdal/orgs","repos_url":"https://api.github.com/users/horsdal/repos","events_url":"https://api.github.com/users/horsdal/events{/privacy}","received_events_url":"https://api.github.com/users/horsdal/received_events","type":"User","site_admin":false},"created_at":"2015-03-24T18:52:40Z","updated_at":"2015-03-24T18:52:40Z","body":"Closing since this is replaced by #1878"}}