remove urlencoded

2015-10-28 06:22:15 +00:00 · 2015-10-28 06:22:15 +00:00 · 3dd2b30586
parent e0dde70c14
commit 3dd2b30586
1 changed files with 3 additions and 0 deletions
--- a/bin/walnut
+++ b/bin/walnut
@ -61,9 +61,12 @@ function eagerLoad() {
  , function () {
      require('body-parser').json();
    }
+    /*
+    // do not use urlencoded as it enables csrf
  , function () {
      require('body-parser').urlencoded();
    }
+    */
  ].forEach(function (fn) {
    promise = promise.then(function (thing) {
      return new PromiseA(function (resolve) {