]> source.dussan.org Git - gitea.git/commit
Fix #5226 by adding CSRF checking to api reqToken and add CSRF to the POST header...
authorzeripath <art27@cantab.net>
Sun, 4 Nov 2018 01:15:55 +0000 (01:15 +0000)
committertechknowlogick <hello@techknowlogick.com>
Sun, 4 Nov 2018 01:15:55 +0000 (21:15 -0400)
commit7096085f2b07246315e95e394b180ce9729efbb0
treebd19725b9897567b5868d7edabe7a800da1899f4
parent57a8440db372d3b2a01d3ef12a4a560424a08657
Fix #5226 by adding CSRF checking to api reqToken and add CSRF to the POST header for deadline (#5250)

* Add CSRF checking to reqToken and place CSRF in the post for deadline creation

Fixes #5226, #5249

* /api/v1/admin/users routes should have reqToken middleware
integrations/api_admin_test.go
integrations/git_test.go
modules/context/api.go
public/js/index.js
routers/api/v1/api.go