mirror of
https://github.com/ZwareBear/awx.git
synced 2026-03-23 01:03:35 -05:00
now that we have the CSRF middleware, we have a reliable token available to us which we can use to verify individual ws_receive payloads; this is _simpler_ than making sure you've properly configured trusted origins, and it's also more secure than Origin header checks see: https://github.com/ansible/tower/issues/2661