ValidateFormAntiForgeryTokenAttribute.cs

using System;
using System.Web.Helpers;
using System.Web.Mvc;
namespace Sitecore.Foundation.Forms.Validation
{
	[AttributeUsage(AttributeTargets.Method | AttributeTargets.Class, AllowMultiple = false, Inherited = true)]
	public class ValidateFormAntiForgeryTokenAttribute : FilterAttribute, IAuthorizationFilter
	{
		public void OnAuthorization(AuthorizationContext filterContext)
		{
			if (filterContext == null)
			{
				throw new ArgumentNullException("filterContext");
			}
			var httpContext = filterContext.HttpContext;
			var cookie = httpContext.Request.Cookies[AntiForgeryConfig.CookieName];
			string formToken = "";
			if (httpContext.Request.Headers["__RequestVerificationToken"] != null)
			{
				var tokenHeaders = httpContext.Request.Headers["__RequestVerificationToken"];
				string[] tokens = tokenHeaders.Split(':');
				if (tokens.Length == 2)
				{
					formToken = tokens[1].Trim();
				}
			}
			AntiForgery.Validate(cookie != null ? cookie.Value : null, formToken);
		}
	}
}