CSRF/XSRF protection on ProductTemplate.Simple.cshtml and ProductTemplate.Grouped.cshtml

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.
7 anni tempo fa
Hi Everyone,

I am new to the forum and looking to use nopCommerce for one of our websites.  We did a prototype for the website and also look into the security for nopCommerce.  I am wondering if the ProductTemplate.Simple.cshtml and ProductTemplate.Grouped.cshtml needs CSRF protection.  Anyone have suggestions or comments regarding this?

It looks like all of the product details does not have any CSRF protection on it.

Thanks
Sim
0
7 anni tempo fa
[email protected] wrote:
Hi Everyone,

I am new to the forum and looking to use nopCommerce for one of our websites.  We did a prototype for the website and also look into the security for nopCommerce.  I am wondering if the ProductTemplate.Simple.cshtml and ProductTemplate.Grouped.cshtml needs CSRF protection.  Anyone have suggestions or comments regarding this?

It looks like all of the product details does not have any CSRF protection on it.

Thanks
Sim


Hi Sim,

Please see:

https://www.nopcommerce.com/boards/t/25962/cross-site-request-forgery-csrf-prevention.aspx

https://www.nopcommerce.com/boards/t/33952/cross-site-request-forgeryconfused-deputy-problem.aspx


Also, see the "Improvements" point# 1 in 3.60 release notes: https://www.nopcommerce.com/releasenotes.aspx
FREE nopCommerce Support? Visit www.StrivingProgrammers.com

Best place for FREE nopCommerce Themes & Plugins

www.StrivingProgrammers.com
A trusted community for developers & web-design enthusiast

http://www.StrivingProgrammers.com/blog
Browse hundreds of FREE how-to tutorials
1
This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.