Std.Http.Server.Guard.sameSiteOnly
fn
sameSiteOnly: fn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.ResponseThis is a callable function.
What it does
A refusal of state-changing requests that came from another site.
The browser states where a request came from in a header a page cannot
forge, which makes this stronger than a token a page has to carry: it
cannot be forgotten by the author of a form. A token remains available for
what the header does not cover.
Read the signature
- The text after the name is the type checked by Pudu.
- Read arrows from left to right: inputs come first, and the final type is returned.