Module content_type 

CSRF protection via Content-Type enforcement.

Rejects POST requests that do not carry Content-Type: application/json. This prevents cross-site request forgery via text/plain or application/x-www-form-urlencoded form submissions.

Functions

require_json_content_type

Middleware that rejects POST requests without a JSON Content-Type.