42d294941c
Removes the CSRF cookie in favor of [`CrossOriginProtection`](https://pkg.go.dev/net/http#CrossOriginProtection) which relies purely on HTTP headers. Fixes: https://github.com/go-gitea/gitea/issues/11188 Fixes: https://github.com/go-gitea/gitea/issues/30333 Helps: https://github.com/go-gitea/gitea/issues/35107 TODOs: - [x] Fix tests - [ ] Ideally add tests to validates the protection --------- Signed-off-by: wxiaoguang <wxiaoguang@gmail.com> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com> |
||
|---|---|---|
| .. | ||
| alert_details.tmpl | ||
| alert.tmpl | ||
| disable_form_autofill.tmpl | ||
| footer_content.tmpl | ||
| footer.tmpl | ||
| head_navbar_icons.tmpl | ||
| head_navbar.tmpl | ||
| head_opengraph.tmpl | ||
| head_script.tmpl | ||
| head_style.tmpl | ||
| head.tmpl | ||
| markup_codepreview.tmpl | ||
| modal_actions_confirm.tmpl | ||
| paginate.tmpl | ||