Commit Graph

5 Commits

Author SHA1 Message Date
Min RK
abe1136cba Use XSRF tokens for cross-site protections
Removes all Referer checks, which have proven unreliable and have never been particularly strong

We can use XSRF on paths for more robust inter-path protections.

- `_xsrf` is added for forms via hidden input
- xsrf check is additionally applied to GET requests on API endpoints
2023-01-16 09:35:33 +01:00
Nathan Barber
33d4f382d5 Use data.items to display users 2022-08-03 10:59:38 -04:00
Min RK
2e878fb5ca fix spawn page link 2022-06-08 10:48:04 +02:00
Nathan Barber
3893fb6d2c Pass base_url 2021-12-13 19:55:23 -05:00
Nathan Barber
11cb9523e8 Add React Admin and modify AdminHandler 2021-04-05 16:51:22 -04:00