SetCookie package:hledger-web
Set the cookie on the client.
Takes a
SetCookie and overrides its value with a CSRF token,
then sets the cookie. See
setCsrfCookieWithCookie.
For details, see the "AJAX CSRF protection" section of
Yesod.Core.Handler.
Make sure to set the
setCookiePath to the root path of your
application, otherwise you'll generate a new CSRF token for every path
of your app. If your app is run from from e.g. www.example.com/app1,
use
app1. The vast majority of sites will just use
/.
Since 1.4.14