Added fix from Otto Bretz to solve issue with forms using 'multipart/form-data' encoding.

cbonello · cbonello · commit fa6a9929ff2c · 2013-09-09T19:53:33.000+05:30
CSRF token was not read properly.
diff --git a/csrf.go b/csrf.go
@@ -72,7 +72,7 @@ var CSRFFilter = func(c *revel.Controller, fc []revel.Filter) {
 		// requests. See http://erlend.oftedal.no/blog/?blogid=118
 		sentToken := r.Header.Get(headerName)
 		if sentToken == "" {
-			sentToken = r.PostFormValue(fieldName)
+			sentToken = c.Params.Get(fieldName)
 		}
 		revel.TRACE.Printf("CSRF token received: '%s'", sentToken)
 

Original file line number	Diff line number	Diff line change
`@@ -72,7 +72,7 @@ var CSRFFilter = func(c *revel.Controller, fc []revel.Filter) {`
`72`	`72`	`// requests. See http://erlend.oftedal.no/blog/?blogid=118`
`73`	`73`	`sentToken := r.Header.Get(headerName)`
`74`	`74`	`if sentToken == "" {`
`75`		`- sentToken = r.PostFormValue(fieldName)`
	`75`	`+ sentToken = c.Params.Get(fieldName)`
`76`	`76`	`}`
`77`	`77`	`revel.TRACE.Printf("CSRF token received: '%s'", sentToken)`
`78`	`78`