CSRF token and caching
    Pinakee BIswas 
    pinakee at waltzz.com
       
    Wed May 25 11:02:23 CEST 2016
    
    
  
Hi,
Our backend uses CSRF tokens for form posts. For pages with forms, if 
Varnish caching is enabled for such pages, form post is failing due to 
CSRF error. Is there a way to handle this? I have been reading that 
using ESI is a solution.
Would really appreciate if someone could help with the above.
Thanks,
Pinakee
PS: Currently, we are using template caching by Nginx. The pages with 
form posts surprisingly works fine with Nginx template caching (but 
isn't working with Varnish). Trying to investigate why.
    
    
More information about the varnish-misc
mailing list