Generate, verify, and rotate CSRF tokens for BoxLang web applications.
npx skills add https://github.com/ortus-boxlang/skills --skill bx-csrf
Please help me install this Agent Skill. Skill: bx-csrf Source: https://github.com/ortus-boxlang/skills/tree/main/boxlang-modules/bx-csrf Command: npx skills add https://github.com/ortus-boxlang/skills --skill bx-csrf
Provides Cross-Site Request Forgery protection for BoxLang web applications by generating, validating, rotating, and scoping tokens to secure state-changing requests.
Install the bx-csrf module and start using CSRFGenerateToken() to issue tokens and CSRFVerifyToken() to validate them.
High-intent search queries and answers about installing and using this skill.
To add CSRF protection to BoxLang web apps, install the bx-csrf module and use CSRFGenerateToken() to issue tokens for forms or API calls, then validate them with CSRFVerifyToken() to guard state-changing actions.
Yes, you can scope CSRF tokens to individual forms in BoxLang by passing an optional key parameter to the CSRFGenerateToken() and CSRFVerifyToken() functions, ensuring per-form token validation.
You can verify CSRF tokens in AJAX or API requests using header-based verification, passing the generated token in the request header and validating it with CSRFVerifyToken() on the server side.
Yes, BoxLang supports automatic CSRF token verification by configuring the boxlang.json file with options for cache, expiry, and auto-verify to automatically guard state-changing operations.
To invalidate existing CSRF tokens in a BoxLang application, call the CSRFRotate() function, which rotates all active tokens and effectively invalidates existing sessions to secure state-changing requests.
The best way to render a CSRF token as a hidden form field is using the CSRFHiddenField() function, which optionally accepts a key for scoping and a forceNew parameter to generate a fresh token directly in the form markup.
ortus-docsConfigure and run a BoxLang MiniServer with Undertow-based runtime settings.
korallisImplement React Server Actions for form handling and server mutations in Next.js 14+.
ortus-docsAutomate BoxLang web application lifecycle, routing, security, and deployment configurations.
tdcareProtect Salvo web applications from cross-site request forgery with token-based verification.
