Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Docs: Add <Form> reference page #68402

Merged
merged 8 commits into from
Aug 23, 2024
Merged

Docs: Add <Form> reference page #68402

merged 8 commits into from
Aug 23, 2024

Conversation

delbaoliveira
Copy link
Contributor

@delbaoliveira delbaoliveira commented Aug 1, 2024

Document new next/form API.
Related: #68102

DOC-3112

@ijjk ijjk added created-by: Next.js Docs team PRs by the Docs team. Documentation Related to Next.js' official documentation. labels Aug 1, 2024
Copy link
Contributor

github-actions bot commented Aug 1, 2024

All broken links are now fixed, thank you!

@Netail
Copy link
Contributor

Netail commented Aug 1, 2024

Regarding the whole next/form package, will it also include a way to prevent CSRF attacks? e.g. with csrf token handling

@delbaoliveira
Copy link
Contributor Author

Waiting for: #68340

@leerob
Copy link
Member

leerob commented Aug 5, 2024

@Netail
Copy link
Contributor

Netail commented Aug 5, 2024

@Netail https://nextjs.org/blog/security-nextjs-server-components-actions#csrf

Yup, server actions are fine, was more wondering regarding route handlers

When Custom Route Handlers (route.tsx) are used instead, extra auditing can be necessary since CSRF protection has to be done manually there. The traditional rules apply there.

@leerob leerob merged commit 7482de6 into canary Aug 23, 2024
53 checks passed
@leerob leerob deleted the docs-next-form branch August 23, 2024 13:49
@github-actions github-actions bot added the locked label Sep 8, 2024
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 8, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
created-by: Next.js DevEx team created-by: Next.js Docs team PRs by the Docs team. Documentation Related to Next.js' official documentation. locked
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants