chickadee » schematra-csrf » chiccup-csrf-hidden-input

chiccup-csrf-hidden-inputprocedure

Generates a Chiccup-formatted hidden input element containing the CSRF token. This is a convenience function that combines token generation with HTML generation.

Returns: A Chiccup list representing an HTML hidden input element

;; Use in forms
`[form (@ (method "POST") (action "/submit"))
  ,(chiccup-csrf-hidden-input)  ; Automatic CSRF protection
  [input (@ (type "text") (name "username"))]
  [button "Submit"]]

;; Equivalent manual version
`[form (@ (method "POST") (action "/submit"))
  [input (@ (type "hidden")
            (name ,(symbol->string (csrf-form-field)))
            (value ,(csrf-get-token)))]
  [input (@ (type "text") (name "username"))]
  [button "Submit"]]