Fix from Otto Bretz to add support for forms with "multipart/form-data" encoding.

cbonello · cbonello · commit b3e8b3694267 · 2013-09-11T09:36:58.000+05:30
diff --git a/csrf.go b/csrf.go
@@ -73,7 +73,7 @@ var CSRFFilter = func(c *revel.Controller, fc []revel.Filter) {
     // requests. See http://erlend.oftedal.no/blog/?blogid=118
     sentToken := r.Header.Get(headerName)
     if sentToken == "" {
-      sentToken = r.PostFormValue(fieldName)
+      sentToken = c.Params.Get(fieldName)
     }
     glog.Infof("CSRF token received: '%s'", sentToken)
 

Original file line number	Diff line number	Diff line change
`@@ -73,7 +73,7 @@ var CSRFFilter = func(c *revel.Controller, fc []revel.Filter) {`
`73`	`73`	`// requests. See http://erlend.oftedal.no/blog/?blogid=118`
`74`	`74`	`sentToken := r.Header.Get(headerName)`
`75`	`75`	`if sentToken == "" {`
`76`		`- sentToken = r.PostFormValue(fieldName)`
	`76`	`+ sentToken = c.Params.Get(fieldName)`
`77`	`77`	`}`
`78`	`78`	`glog.Infof("CSRF token received: '%s'", sentToken)`
`79`	`79`