Turn off Global XSS Filtering for spec. controller

2020-07-22 17:20发布

问题:

I'm developing project integrated with FB and I have problem with Deautharization (when user remove App from his Authorized Apps)

Old Question: CodeIgniter => Facebook App Deauthorization

Edit2: I just realized the problem....

|--------------------------------------------------------------------------
| Global XSS Filtering
|--------------------------------------------------------------------------
|
| Determines whether the XSS filter is always active when GET, POST or
| COOKIE data is encountered
|
*/
$config['global_xss_filtering'] = TRUE;

CodeIgniter block POST requests that don't have specific token as hidden value...

So question now is : can I turn it off for specific controller ?

回答1:

You can disable global_xss_filtering selectively using this guide: Codeigniter - Disable XSS filtering on a post basis