John Chilton b17091a3ec CSRF protection for login, logout, and user registeration. ...

The approach is to use per-session CSRF tokens - this avoids many complications related to per-form tokens. We generate a sequence of hashes based on session IDs that doesn't follow the same pattern as normal database API IDs by supplying a "kind" parameter to encode_id (we use the same pattern for securing the job files API for Pulsar).

2017-08-04 11:52:13 -04:00

..

change-password.js

build the client

2016-12-14 22:46:36 +01:00

extra-information.js

build the client

2016-12-14 22:46:36 +01:00

manage-user-information.js

build the client

2016-12-14 22:46:36 +01:00

user-custom-builds.js

Move custom build metadata endpoint to histories

2017-04-04 14:09:48 -04:00

user-model.js

UI: use strict and replace leaky uses of Backbone.Events.on with listenTo

2016-01-12 15:18:54 -05:00

user-preferences.js

CSRF protection for login, logout, and user registeration.

2017-08-04 11:52:13 -04:00

user-quotameter.js

Minor tooltip tweaks.

2017-02-14 15:49:59 -05:00