Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add CSRF protection to internal requests #474

Merged
merged 4 commits into from Sep 15, 2020
Merged

Add CSRF protection to internal requests #474

merged 4 commits into from Sep 15, 2020

Commits on Sep 13, 2020

  1. Add CSRF to error page and internal calls

    @RobinDaugherty
    RobinDaugherty committed Sep 13, 2020
    Copy the full SHA
    617e65e View commit details
    Browse the repository at this point in the history

  2. Fix incorrect mime type in JSON error responses

    @RobinDaugherty
    RobinDaugherty committed Sep 13, 2020
    Copy the full SHA
    764bf3b View commit details
    Browse the repository at this point in the history

  3. Work around weirdness in older Rack::Response

    @RobinDaugherty
    RobinDaugherty committed Sep 13, 2020
    Copy the full SHA
    ef06461 View commit details
    Browse the repository at this point in the history

  4. Middleware specs to cover more CSRF edge cases 

    and refactor the specs to be more clear.
    @RobinDaugherty
    RobinDaugherty committed Sep 13, 2020
    Copy the full SHA
    4f05b45 View commit details
    Browse the repository at this point in the history