如果自动加载，则阻止 codeigniter 会话库发送 set-cookie 标头参数
我有一个基于 codeigniter 的网站，有时我有通过 AJAX 调用并返回 JSON 值的控制器。问题是因为我已经自动加载了会话库，所以从 codeigniter 作为响应发送的任何内容都
Set-Cookie ci_csrf_token=65d0857a89345g5sg5695e71fa687b14c; expires=Sat, 09-Jul-2011 17:00:29 GMT; path=/
设置了标头参数。这似乎是不必要的带宽开销，有什么方法可以阻止 codeigniter 发送此标头吗？
I have a codeigniter based website and occasionally I have controllers that are called via AJAX and return JSON values. The problem is since I've already autoloaded the session library anything that's sent as a response from codeigniter has the
Set-Cookie ci_csrf_token=65d0857a89345g5sg5695e71fa687b14c; expires=Sat, 09-Jul-2011 17:00:29 GMT; path=/
header parameter set. This seems like unneccessary bandwidth overhead, is there any way to prevent codeigniter from sending this header?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
并非不修改 Session 类：它不会在发布的接口中公开对该标头的控制。
此外，该 cookie 不是由 Session 类生成的，而是由 Security 类生成的。您必须禁用 CSRF 保护，不幸的是，您无法在每个请求行为上使用已发布的接口来执行此操作。
Not without modifying the Session class: it does not expose control over that header in the published interface.
In addition, that cookie is not generated by the Session class, but by the Security class. You will have to disable CSRF protection, which is unfortunately not something you can do using the published interface on a per-request behavior.