See the Framework Intro page for more details on framework versions in general.
- A valid
redcap_csrf_token
parameter is now required on almost all POST requests, but will be automatically added behind the scenes in many cases.- Many module pages where the REDCap headers are included will not require any changes because the
redcap_csrf_token
parameter will automatically be added to static forms and jQuerypost()
method calls. - The
redcap_csrf_token
POST parameter will need to be added to dynamically generated forms, jQueryajax()
calls, non-jQuery javascript requests, and POST requests on pages where the REDCap headers are not included. In those cases, the$module->getCSRFToken()
method should be used to set the value of theredcap_csrf_token
POST parameter. All POST requests made by module code should be tested before releasing a module update for this framework version.
- Many module pages where the REDCap headers are included will not require any changes because the
- For the very small number of pages where CSRF tokens