Hello!

I want to implement CSRF check with haproxy.
I want to check cookie value matched the header value and deny request if
they're didn't equal.

Something like this:
alc token_valid req.cook(token) %[req.hdr(token)]
http-request deny unless token_valid

But I can't find the way to perform this check.
Is it really impossible?

Alexander Lebedev

Reply via email to