{"action":"opened","issue":{"url":"https://api.github.com/repos/yesodweb/yesod/issues/1192","repository_url":"https://api.github.com/repos/yesodweb/yesod","labels_url":"https://api.github.com/repos/yesodweb/yesod/issues/1192/labels{/name}","comments_url":"https://api.github.com/repos/yesodweb/yesod/issues/1192/comments","events_url":"https://api.github.com/repos/yesodweb/yesod/issues/1192/events","html_url":"https://github.com/yesodweb/yesod/issues/1192","id":141994667,"number":1192,"title":"CSRF rejections should be logged by default","user":{"login":"bitemyapp","id":320177,"avatar_url":"https://avatars.githubusercontent.com/u/320177?v=3","gravatar_id":"","url":"https://api.github.com/users/bitemyapp","html_url":"https://github.com/bitemyapp","followers_url":"https://api.github.com/users/bitemyapp/followers","following_url":"https://api.github.com/users/bitemyapp/following{/other_user}","gists_url":"https://api.github.com/users/bitemyapp/gists{/gist_id}","starred_url":"https://api.github.com/users/bitemyapp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bitemyapp/subscriptions","organizations_url":"https://api.github.com/users/bitemyapp/orgs","repos_url":"https://api.github.com/users/bitemyapp/repos","events_url":"https://api.github.com/users/bitemyapp/events{/privacy}","received_events_url":"https://api.github.com/users/bitemyapp/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-03-18T22:40:39Z","updated_at":"2016-03-18T22:40:39Z","closed_at":null,"body":"I've made a custom CSRF middleware privately that logs that a request was rejected. This is needed because the user will never see any of the log output from their handler and the body seems to be empty when this happens.\r\n\r\nI could respin this with a parameterization that takes a logLevel and then update the scaffolds if people are open to this."}}