John Chilton b17091a3ec CSRF protection for login, logout, and user registeration. ...

The approach is to use per-session CSRF tokens - this avoids many complications related to per-form tokens. We generate a sequence of hashes based on session IDs that doesn't follow the same pattern as normal database API IDs by supplying a "kind" parameter to encode_id (we use the same pattern for securing the job files API for Pulsar).

2017-08-04 11:52:13 -04:00

..

app

Merge branch 'tags_in_history' into dev

2017-03-06 13:27:44 -05:00

layout

CSRF protection for login, logout, and user registeration.

2017-08-04 11:52:13 -04:00

libs

Merge branch 'dev' into fix_workflow_ui

2017-01-24 13:15:00 -05:00

mvc

CSRF protection for login, logout, and user registeration.

2017-08-04 11:52:13 -04:00

nls

Updating the dataset id

2017-07-31 16:46:50 +02:00

reports_webapp

remove the autorefresh on Reports app

2015-10-21 14:22:41 -04:00

templates/compiled

Webpack: correct handlebars template generation to return an AMD function - this normalizes import of templates between webpack and require, fix sweepster tools import and templates

2015-11-20 12:36:05 -05:00

ui

Rename custom autocomplete module to avoid interference with original jquery autocomplete, use original version to display datalists

2017-01-11 10:44:45 -05:00

utils

Merging with dev

2017-06-21 17:26:48 +02:00

viz

Adjust existing urls to new client side route

2017-07-13 08:55:01 -04:00

admin.toolshed.js.map

repack client (seems to not be done in a while)

2017-03-21 09:53:51 -04:00

analysis.js.map

Merge branch 'tags_in_history' into dev

2017-03-06 13:27:44 -05:00

app.js.map

Merge branch 'tags_in_history' into dev

2017-03-06 13:27:44 -05:00

galaxy-app-base.js.map

Webpack: pack scripts, move galaxy-app-base.js to galaxy.js

2015-11-24 16:49:03 -05:00

galaxy.interactive_environments.js.map

Error handling for GIE container readiness check

2017-04-17 16:51:35 -04:00

galaxy.js.map

CSRF protection for login, logout, and user registeration.

2017-08-04 11:52:13 -04:00

galaxy.library.js.map

adjust logic to match the include deleted checkbox

2017-06-27 10:41:22 +02:00

galaxy.menu.js.map

Tours.

2015-12-18 10:26:22 -05:00

galaxy.pages.js.map

Remove change to original handler function

2017-07-07 11:01:36 -04:00

i18n.js.map

…

onload.js.map

Remove global Toastr addition, allow external requires through standard js-app entrypoint.

2017-05-05 12:08:01 -04:00

polyfills.js.map

Client, polyfills: check for sessionStorage using a more cross-browser (apparently) way

2015-12-09 14:10:36 -05:00

toolshed.groups.js.map

backbone base of TS groups

2015-06-09 16:13:10 -04:00