1ae3b127fc
Remove unused CSRF options, decouple "new csrf protector" and "prepare" logic, do not redirect to home page if CSRF validation falis (it shouldn't happen in daily usage, if it happens, redirecting to home doesn't help either but just makes the problem more complex for "fetch") (cherry picked from commit 1fede04b83288d8a91304a83b7601699bb5cba04) Conflicts: options/locale/locale_en-US.ini tests/integration/repo_branch_test.go trivial context conflicts |
||
---|---|---|
.. | ||
upload | ||
access_log.go | ||
api.go | ||
api_org.go | ||
api_test.go | ||
base.go | ||
base_test.go | ||
captcha.go | ||
context.go | ||
context_cookie.go | ||
context_model.go | ||
context_request.go | ||
context_response.go | ||
context_template.go | ||
context_test.go | ||
csrf.go | ||
org.go | ||
package.go | ||
pagination.go | ||
permission.go | ||
private.go | ||
quota.go | ||
repo.go | ||
repository.go | ||
response.go | ||
user.go | ||
utils.go | ||
xsrf.go | ||
xsrf_test.go |