1，在Ajax提交的headers属性中添加'X-CSRF-TOKEN': $('meta[name="_token"]').attr('content')
2，使用白名单进行csrf验证，在目录app\Http\Middleware\VerifyCsrfToken.php中
================
namespace App\Http\Middleware;
use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as Middleware;
class VerifyCsrfToken extends Middleware
{
/**
* Indicates whether the XSRF-TOKEN cookie should be set on the response.
*
* @var bool
*/
protected $addHttpCookie = true;
/**
* The URIs that should be excluded from CSRF verification.
*
* @var array
*/
protected $except = [
//
'admin/manual_callback',
];
}
=================================================
3，在html的<head></head>中添加标签
440
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
