server: Disable CSRFFilter

As there are no authenticated routes, CSRF protection can be disabled.
6 years ago · 4f6ab522d4
1 changed files with 2 additions and 0 deletions
--- a/server/conf/application.conf
+++ b/server/conf/application.conf
@ -16,6 +16,8 @@ play.http {
 play.filters.enabled += "play.filters.cors.CORSFilter"
 play.filters.enabled += "com.xsn.explorer.play.LoggingFilter"
 play.filters.disabled += "play.filters.csrf.CSRFFilter"
 play.filters.cors {
  allowedOrigins = [
    "http://xsnexplorer.io", "https://xsnexplorer.io",