Include CSRF middleware in base install for easy override / whitelist.
This makes it easy to skip CSRF verification for things like web hooks and such from GitHub / Stripe.
This commit is contained in:
@@ -15,7 +15,7 @@ class Kernel extends HttpKernel {
|
||||
'Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse',
|
||||
'Illuminate\Session\Middleware\StartSession',
|
||||
'Illuminate\View\Middleware\ShareErrorsFromSession',
|
||||
'Illuminate\Foundation\Http\Middleware\VerifyCsrfToken',
|
||||
'App\Http\Middleware\VerifyCsrfToken',
|
||||
];
|
||||
|
||||
/**
|
||||
|
||||
Reference in New Issue
Block a user