John Chilton b17091a3ec CSRF protection for login, logout, and user registeration. ...

The approach is to use per-session CSRF tokens - this avoids many complications related to per-form tokens. We generate a sequence of hashes based on session IDs that doesn't follow the same pattern as normal database API IDs by supplying a "kind" parameter to encode_id (we use the same pattern for securing the job files API for Pulsar).

2017-08-04 11:52:13 -04:00

..

base

Strip stashed-yet-merged debug detritus from history UI fixes.

2017-02-20 17:16:27 -05:00

citation

Update wiki.galaxyproject.org links in client

2017-04-26 17:02:46 -04:00

collection

Client build as part of merge.

2017-07-05 16:57:13 -04:00

dataset

Updating the dataset id

2017-07-31 16:46:50 +02:00

form

Disable feature for forms which auto refresh with a server validation

2017-06-02 15:51:59 -04:00

grid

Unify shared grid views for visualizations and pages, always display directly shared visualizations

2017-07-13 09:35:25 -04:00

history

Restore basic copy and unshare operations

2017-06-29 04:01:29 +02:00

job

…

library

adjust logic to match the include deleted checkbox

2017-06-27 10:41:22 +02:00

list

UI, history: render on deleted/hidden toggle

2016-07-28 11:43:44 -04:00

tool

Fix indentation

2017-07-02 16:27:28 +02:00

toolshed

repack client (seems to not be done in a while)

2017-03-21 09:53:51 -04:00

ui

Resolve previously existing issue with pasting float values into integer fields

2017-06-05 14:09:24 -04:00

upload

[17.05] Fix FTP upload of multiple files in collection uploader.

2017-05-11 15:37:50 -04:00

user

CSRF protection for login, logout, and user registeration.

2017-08-04 11:52:13 -04:00

visualization

Unify shared grid views for visualizations and pages, always display directly shared visualizations

2017-07-13 09:35:25 -04:00

workflow

Merge pull request #4371 from mvdbeek/fix_run_from_workflow_editor

2017-08-03 18:20:15 -04:00

annotation.js

UI, history: correct current dataset, tags, annos

2016-04-04 11:12:54 -04:00

base-mvc.js

UI, history: minor cleanup

2016-03-21 10:40:13 -04:00

tag.js

Slight refactoring, also name->hash for recommended tags.

2017-04-26 14:53:07 -04:00

tours.js

Merge branch 'dev' into admin_app

2017-05-15 16:53:23 -04:00

webhooks.js

pass tool version along with the id

2017-05-18 19:31:08 +02:00