fix(form): harden AirForm CSRF validation - #1163

Merged

audreyfeldroy merged 3 commits into

mainfrom

security/bind-airform-csrf

Aug 4, 2026

Commits on Aug 4, 2026

fix(form): reject cross-origin CSRF submissions
audreyfeldroy
committed
c7b421a
fix(form): preserve explicit origin ports
audreyfeldroy
committed
3d509ba
test(form): strengthen CSRF rollout coverage
audreyfeldroy
committed
eb0400b