lib/roda/plugins/csrf.rb in roda-3.8.0 vs lib/roda/plugins/csrf.rb in roda-3.9.0
- old
+ new
@@ -2,9 +2,13 @@
require 'rack/csrf'
class Roda
module RodaPlugins
+ # This plugin is no longer recommended for use, it exists only for
+ # backwards compatibility. Consider using the route_csrf plugin
+ # instead, as that provides stronger CSRF protection.
+ #
# The csrf plugin adds CSRF protection using rack_csrf, along with
# some csrf helper methods to use in your views. To use it, load
# the plugin, with the options hash passed to Rack::Csrf:
#
# plugin :csrf, raise: true