{"action":"closed","issue":{"url":"https://api.github.com/repos/75team/thinkjs/issues/430","repository_url":"https://api.github.com/repos/75team/thinkjs","labels_url":"https://api.github.com/repos/75team/thinkjs/issues/430/labels{/name}","comments_url":"https://api.github.com/repos/75team/thinkjs/issues/430/comments","events_url":"https://api.github.com/repos/75team/thinkjs/issues/430/events","html_url":"https://github.com/75team/thinkjs/issues/430","id":172094399,"number":430,"title":"使用rest后，开启csrf功能后，校验的问题","user":{"login":"kaven85","id":2148307,"avatar_url":"https://avatars.githubusercontent.com/u/2148307?v=3","gravatar_id":"","url":"https://api.github.com/users/kaven85","html_url":"https://github.com/kaven85","followers_url":"https://api.github.com/users/kaven85/followers","following_url":"https://api.github.com/users/kaven85/following{/other_user}","gists_url":"https://api.github.com/users/kaven85/gists{/gist_id}","starred_url":"https://api.github.com/users/kaven85/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kaven85/subscriptions","organizations_url":"https://api.github.com/users/kaven85/orgs","repos_url":"https://api.github.com/users/kaven85/repos","events_url":"https://api.github.com/users/kaven85/events{/privacy}","received_events_url":"https://api.github.com/users/kaven85/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-08-19T09:47:26Z","updated_at":"2016-10-13T08:38:00Z","closed_at":"2016-10-13T08:38:00Z","body":"## DESC\r\n开启csrf后，在delete请求时，post里没有formdata。我看了csrf校验，当为ajax、只有在post情况下，才有post的值。delete时都没有。param就只能把csrf的值放到url上了。\r\n我觉得这个可以参考sailjs的做法，它是放到head里获取的。\r\n\r\n\r\n## ENV\r\n\r\nPlatform:\r\nmac osx\r\nNode.js Version:\r\nv6.3.1\r\nThinkJS Version:\r\nv2.2.8"}}
{"actor":{"display_login":"welefen"}}