mirror of
https://github.com/go-gitea/gitea.git
synced 2026-01-06 20:30:20 +01:00
42d294941c
Removes the CSRF cookie in favor of [`CrossOriginProtection`](https://pkg.go.dev/net/http#CrossOriginProtection) which relies purely on HTTP headers. Fixes: https://github.com/go-gitea/gitea/issues/11188 Fixes: https://github.com/go-gitea/gitea/issues/30333 Helps: https://github.com/go-gitea/gitea/issues/35107 TODOs: - [x] Fix tests - [ ] Ideally add tests to validates the protection --------- Signed-off-by: wxiaoguang <wxiaoguang@gmail.com> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
55 lines
1.8 KiB
Handlebars
55 lines
1.8 KiB
Handlebars
{{template "user/settings/layout_head" (dict "ctxData" . "pageClass" "user settings organization")}}
|
|
<div class="user-setting-content">
|
|
<h4 class="ui top attached header">
|
|
{{ctx.Locale.Tr "settings.orgs"}}
|
|
{{if .SignedUser.CanCreateOrganization}}
|
|
<div class="ui right">
|
|
<a class="ui primary tiny button" href="{{AppSubUrl}}/org/create">{{ctx.Locale.Tr "admin.orgs.new_orga"}}</a>
|
|
</div>
|
|
{{end}}
|
|
</h4>
|
|
<div class="ui attached segment orgs">
|
|
{{if .Orgs}}
|
|
<div class="flex-list">
|
|
{{range .Orgs}}
|
|
<div class="flex-item">
|
|
<div class="flex-item-leading">
|
|
{{ctx.AvatarUtils.Avatar . 28 "mini"}}
|
|
</div>
|
|
<div class="flex-item-main">
|
|
<div class="flex-item-title">{{template "shared/user/name" .}}</div>
|
|
<div class="flex-text-body">
|
|
{{.Description}}
|
|
</div>
|
|
</div>
|
|
<div class="flex-item-trailing">
|
|
<form>
|
|
<button class="ui red button delete-button" data-modal-id="leave-organization"
|
|
data-url="{{.OrganisationLink}}/members/action/leave" data-datauid="{{$.SignedUser.ID}}"
|
|
data-name="{{$.SignedUser.DisplayName}}"
|
|
data-data-organization-name="{{.DisplayName}}">{{ctx.Locale.Tr "org.members.leave"}}
|
|
</button>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
{{end}}
|
|
</div>
|
|
{{template "base/paginate" .}}
|
|
{{else}}
|
|
{{ctx.Locale.Tr "settings.orgs_none"}}
|
|
{{end}}
|
|
</div>
|
|
</div>
|
|
|
|
<div class="ui g-modal-confirm delete modal" id="leave-organization">
|
|
<div class="header">
|
|
{{ctx.Locale.Tr "org.members.leave"}}
|
|
</div>
|
|
<div class="content">
|
|
<p>{{ctx.Locale.Tr "org.members.leave.detail" (HTMLFormat `<span class="%s"></span>` "dataOrganizationName")}}</p>
|
|
</div>
|
|
{{template "base/modal_actions_confirm" .}}
|
|
</div>
|
|
|
|
{{template "user/settings/layout_footer" .}}
|