.netcore一个避免跨站请求的中间件

 1     public class GlobalValidateMiddleTool
 2     {
 3         private RequestDelegate _requestDelete;
 4         private IAntiforgery _antiforgery;
 5         public GlobalValidateMiddleTool(RequestDelegate requestDelegate,IAntiforgery antiforgery)
 6         {
 7             _requestDelete = requestDelegate;
 8             _antiforgery = antiforgery;
 9         }
10         public async Task Invoke(HttpContext context)
11         {
12             if (context.Request.Method.ToLower() == "post")
13             {
14                 await _antiforgery.ValidateRequestAsync(context);
15             }
16             await _requestDelete(context);
17         }
18     }

1     public static class IapplicationExt
2     {
3         public static IApplicationBuilder UseGlobalTokenValidate(this IApplicationBuilder app)
4         {
5             return app.UseMiddleware();
6         }
7     }

app.UseGlobalTokenValidate();

"about" method="post">
    "text" id="data" name="data" />
    "submit" value="test" />

        [HttpPost]
        public IActionResult About(string data)
        {
            if (ModelState.IsValid)
            {
                return Json(data);
            }
            return NotFound();
        }