[fpc-pascal] fpweb and security

[michael.vancanneyt at wisa.be]

On Mon, 27 Feb 2012, ik wrote:

> Hello,
>
> I'm thinking now to use fpweb for a web application I need to build,
> but the application is going to be over the internet, and I'm
> interesting in knowing about few security issues that are supported or
> not.
>
> Does it have any CSRF protection ?
> What other if any security tools does it have ?
>

None. It is a HTTP handling framework. Other than Basic Authentication on
the web server level, HTTP does not offer security mechanisms, and therefor
none are implemented in FPweb either.

Michael.