CSRF whitelist supports regex

Signed-off-by: Casey Hancock <crh431@gmail.com>

1 files changed, 6 insertions, 0 deletions

diff --git a/user_guide_src/source/libraries/security.rst b/user_guide_src/source/libraries/security.rst
index fb875a0d9..566924398 100644
--- a/user_guide_src/source/libraries/security.rst
+++ b/user_guide_src/source/libraries/security.rst
@@ -97,6 +97,12 @@ by editing the 'csrf_exclude_uris' config parameter::
 
 	$config['csrf_exclude_uris'] = array('api/person/add');
 
+Optionally, you can use regular expressions as well as the ':any' and ':num'
+wildcards in the URIs::
+
+	$config['csrf_exclude_uris'] = array('api/record/:num','api/title/[a-zA-Z]+');
+	
+
 ***************
 Class Reference
 ***************