Lerking/gitea
1
0
Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2026-01-29 15:30:44 +01:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity
20,215 Commits 19 Branches 245 Tags
111c822a309adc7a6d8ce052d32ee1abe2ce920d
Commit Graph

2 Commits

Author SHA1 Message Date
silverwind
42d294941c Replace CSRF cookie with CrossOriginProtection (#36183)
Some checks failed
release-nightly / nightly-binary (push) Has been cancelled
Details
release-nightly / nightly-container (push) Has been cancelled
Details 
Removes the CSRF cookie in favor of
[`CrossOriginProtection`](https://pkg.go.dev/net/http#CrossOriginProtection)
which relies purely on HTTP headers.

Fixes: https://github.com/go-gitea/gitea/issues/11188
Fixes: https://github.com/go-gitea/gitea/issues/30333
Helps: https://github.com/go-gitea/gitea/issues/35107

TODOs:

- [x] Fix tests
- [ ] Ideally add tests to validates the protection

---------

Signed-off-by: wxiaoguang <wxiaoguang@gmail.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
 2025-12-25 12:33:34 +02:00
Lunny Xiao
17c8aa6587 Add rebase push display wrong comments bug (#35560) 
Fix #35518

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
 2025-10-03 15:16:17 -07:00