Min RK
cd79f17d90
jsx: update and address eslint
...
add script to top-level package.json to run eslint in subdir
2025-03-26 12:02:04 +01:00
Simon Li
e63ec9aedc
Admin pages: use inherited base_url from render_template
2024-08-13 16:33:16 +01:00
Min RK
8cbe1eac2b
use URL api to construct API url
...
avoids imperfect logic detecting `?`
2024-03-08 09:05:55 +01:00
Min RK
d5bc135d9b
fix xsrfToken in react
...
caught now that we have browser tests
2023-01-30 15:42:07 +01:00
Min RK
abe1136cba
Use XSRF tokens for cross-site protections
...
Removes all Referer checks, which have proven unreliable and have never been particularly strong
We can use XSRF on paths for more robust inter-path protections.
- `_xsrf` is added for forms via hidden input
- xsrf check is additionally applied to GET requests on API endpoints
2023-01-16 09:35:33 +01:00
Nathan Barber
33d4f382d5
Use data.items to display users
2022-08-03 10:59:38 -04:00
Min RK
2e878fb5ca
fix spawn page link
2022-06-08 10:48:04 +02:00
Nathan Barber
3893fb6d2c
Pass base_url
2021-12-13 19:55:23 -05:00
Nathan Barber
11cb9523e8
Add React Admin and modify AdminHandler
2021-04-05 16:51:22 -04:00