Skip to main content

HTMX_CSRF_JS_PATH

Constant HTMX_CSRF_JS_PATH 

Source
pub const HTMX_CSRF_JS_PATH: &str = "/static/js/autumn-htmx-csrf.js";
Expand description

Same-origin path where Autumn serves the htmx CSRF helper.

The helper reads a CSRF token from either:

  • <meta name="csrf-token" content="...">
  • <meta name="autumn-csrf-token" content="...">

The request header defaults to X-CSRF-Token; override it with data-header="..." on the meta tag when using a custom CSRF header name.