silverwind 42d294941c Replace CSRF cookie with CrossOriginProtection (#36183) ... Removes the CSRF cookie in favor of [`CrossOriginProtection`](https://pkg.go.dev/net/http#CrossOriginProtection) which relies purely on HTTP headers. Fixes: https://github.com/go-gitea/gitea/issues/11188 Fixes: https://github.com/go-gitea/gitea/issues/30333 Helps: https://github.com/go-gitea/gitea/issues/35107 TODOs: - [x] Fix tests - [ ] Ideally add tests to validates the protection --------- Signed-off-by: wxiaoguang <wxiaoguang@gmail.com> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>		2025-12-25 12:33:34 +02:00
..
api	refactor: extract helper functions from SearchIssues (#36158)	2025-12-20 17:57:41 -08:00
common	Replace CSRF cookie with CrossOriginProtection (#36183)	2025-12-25 12:33:34 +02:00
install	Fix oauth2 session gob register (#36017)	2025-11-26 23:25:34 +08:00
private	Fix the bug when ssh clone with redirect user or repository (#36039)	2025-12-04 19:17:49 +00:00
utils	Refactor older tests to use testify (#33140)	2025-01-09 09:21:47 +08:00
web	Replace CSRF cookie with CrossOriginProtection (#36183)	2025-12-25 12:33:34 +02:00
init.go	Use global lock instead of status pool for cron lock (#35507)	2025-09-27 10:11:52 -07:00