Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-02-25 | changed logout to post | NavaL | |
Issue #612 | |||
2016-02-25 | Backend and frontend protection against csrf attacks: | NavaL | |
- root resources changes the csrf token cookie everytime it is loaded, in particular during the intestitial load during login - it will also add that cookie on single user mode - initialize will still load all resources - but they you cant access them if the csrf token do not match - all ajax calls needs to add the token to the header - non ajax get requests do not need xsrf token validation - non ajax post will have to send the token in as a form input or in the content Issue #612 | |||
2015-10-29 | Redirect user to login if ajax request fails with 302 | Folker Bernitt | |
- See project issue 162 - Should solve 'disconnected' problems |