Disable global XSS filtering for specification. controller?

I am developing a project integrated with FB and I have a problem with Deautharization (when the user removes the application from their Authorized Applications)

Old Question: CodeIgniter => Decrypt Facebook Applications

Edit2: I just realized the problem ....

|--------------------------------------------------------------------------
| Global XSS Filtering
|--------------------------------------------------------------------------
|
| Determines whether the XSS filter is always active when GET, POST or
| COOKIE data is encountered
|
*/
$config['global_xss_filtering'] = TRUE;

CodeIgniter blocks POST requests that do not have a specific token as a hidden value ...

So now the question is: can I disable it for a specific controller?

+3
source share
1 answer

You can global_xss_filteringselectively disable using this guide: Codeigniter - disable message-based XSS filtering

+3
source

All Articles