is it possible for me to disable csrf on particular route ?

[xr]

say, if I want to disable csrf when posting data to this url -> /upload/image but, others keep on, how could I do that, i just notice in v10.0 in the bottom of config/csrf.js, there are some settings, but it seems that something related to cors and based on origin header, so is it possible to disable the particular route? thanks

[sgress454]

Hi @chloetina. In the future please try posting support questions to Stackoverflow or our Google Group; this forum is for bug reports related to Sails core.

---

To answer your question, no, there is currently no per-route configuration for CSRF. The only way to disable it for a particular route would be to add some custom middleware after the session middleware that checks req.url, and if it matches /upload/image, places the CSRF token in req.params as if it had been send with the request.

[xr]

@sgress454 ok, got it. thx for your answer