- New #68: Add the
CsrfHeaderMiddleware
middleware to use custom HTTP header to prevent forgery of requests (@olegbaturin) - Chg #71: Deprecate
CsrfMiddleware
in favor ofCsrfTokenMiddleware
(@ev-gor) - Enh #68: Add the
CsrfMiddleware::withSafeMethods()
method to configure a custom safe HTTP methods list (@olegbaturin)