IdP CSRF Defence

[Cantor, Scott]

As much as I don't love the downside of having to do it all in "user space" so to speak, because of the ease of omitting it by accident, my experience with views, view scope, and on-XXXX rules in the flows is that they're fairly unreliable and subject to weird quirks. It's one thing to rely on them in ways that essentially break if something goes wrong, since that's safe, but relying on them to implement some kind of protective feature is less appealing to me.

I think to some degree we can automate the token checking by adding it to a new action base class that does the check in the preExecute hook, like the conditional action class does. Also easy to toggle on/off that way.

It's less SWF-dependent also that way of course, probably could be implemented to some degree at lower layers.

That's my take anyway. I'm sure there are trade-offs.

-- Scott