John Chilton b17091a3ec CSRF protection for login, logout, and user registeration. ...

The approach is to use per-session CSRF tokens - this avoids many complications related to per-form tokens. We generate a sequence of hashes based on session IDs that doesn't follow the same pattern as normal database API IDs by supplying a "kind" parameter to encode_id (we use the same pattern for securing the job files API for Pulsar).

2017-08-04 11:52:13 -04:00

..

generic-nav-view.js

make client

2016-07-22 22:47:13 +02:00

masthead.js

Merge 16.01, rebuild.

2016-03-23 12:39:06 -04:00

menu.js

CSRF protection for login, logout, and user registeration.

2017-08-04 11:52:13 -04:00

modal.js

Webpack: move old school modal into layout/

2015-11-12 10:59:25 -05:00

page.js

Fix left/right panel hiding

2017-06-20 22:26:03 -04:00

panel.js

Revise panel/iframe handling, align naming, rely on empty to trigger removal of previous view

2017-06-19 15:48:28 -04:00

scratchbook.js

Add localization defaults to base locale.js, rebuild client to incorporate latest changes from @manabuishii

2017-07-12 10:26:14 -04:00