{"action":"created","issue":{"url":"https://api.github.com/repos/pouchdb/pouchdb/issues/4147","labels_url":"https://api.github.com/repos/pouchdb/pouchdb/issues/4147/labels{/name}","comments_url":"https://api.github.com/repos/pouchdb/pouchdb/issues/4147/comments","events_url":"https://api.github.com/repos/pouchdb/pouchdb/issues/4147/events","html_url":"https://github.com/pouchdb/pouchdb/issues/4147","id":100447484,"number":4147,"title":"Request support for new CSRF feature (COUCHDB-2762) added to CouchDb 2.0","user":{"login":"tohagan","id":301525,"avatar_url":"https://avatars.githubusercontent.com/u/301525?v=3","gravatar_id":"","url":"https://api.github.com/users/tohagan","html_url":"https://github.com/tohagan","followers_url":"https://api.github.com/users/tohagan/followers","following_url":"https://api.github.com/users/tohagan/following{/other_user}","gists_url":"https://api.github.com/users/tohagan/gists{/gist_id}","starred_url":"https://api.github.com/users/tohagan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tohagan/subscriptions","organizations_url":"https://api.github.com/users/tohagan/orgs","repos_url":"https://api.github.com/users/tohagan/repos","events_url":"https://api.github.com/users/tohagan/events{/privacy}","received_events_url":"https://api.github.com/users/tohagan/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-08-12T01:34:33Z","updated_at":"2015-08-12T01:39:33Z","closed_at":null,"body":"As you're probably aware, CouchDb 2.0 [just announced](https://issues.apache.org/jira/browse/COUCHDB-2762) support for CSRF Protection. Would be nice to be able to enable this as a PouchDb feature. In my web wanderings I also notice this issue for the Drupal PouchDb module:\r\n  - https://www.drupal.org/node/2470691\r\n\r\nCSRF protection is a seriously needed security feature for Couch and I think it should be added to the roadmap for Couch 1.x as well so makes sense if Pouch/Couch both plan to support it.\r\n\r\nI'm also unsure if you support CouchDB 2.0 yet (perhaps you might clarify this on the Guide Introduction?).  Thanks guys.\r\n"},"comment":{"url":"https://api.github.com/repos/pouchdb/pouchdb/issues/comments/130132646","html_url":"https://github.com/pouchdb/pouchdb/issues/4147#issuecomment-130132646","issue_url":"https://api.github.com/repos/pouchdb/pouchdb/issues/4147","id":130132646,"user":{"login":"tohagan","id":301525,"avatar_url":"https://avatars.githubusercontent.com/u/301525?v=3","gravatar_id":"","url":"https://api.github.com/users/tohagan","html_url":"https://github.com/tohagan","followers_url":"https://api.github.com/users/tohagan/followers","following_url":"https://api.github.com/users/tohagan/following{/other_user}","gists_url":"https://api.github.com/users/tohagan/gists{/gist_id}","starred_url":"https://api.github.com/users/tohagan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tohagan/subscriptions","organizations_url":"https://api.github.com/users/tohagan/orgs","repos_url":"https://api.github.com/users/tohagan/repos","events_url":"https://api.github.com/users/tohagan/events{/privacy}","received_events_url":"https://api.github.com/users/tohagan/received_events","type":"User","site_admin":false},"created_at":"2015-08-12T01:39:33Z","updated_at":"2015-08-12T01:39:33Z","body":"Hmmm ... Maybe it's already in Couch 1.x  ... Just found this \r\n\r\nhttps://people.apache.org/~dch/snapshots/couchdb/20140715/new-docs-build/html/cve/2010-2234.html"}}