Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Set strict defaults for CSRF #147

Merged
merged 1 commit into from
May 20, 2022
Merged

Set strict defaults for CSRF #147

merged 1 commit into from
May 20, 2022

Conversation

feedmeapples
Copy link
Contributor

@feedmeapples feedmeapples commented May 19, 2022 •
edited
Loading

What was changed

Set strict CSRF policy

Why?

Protecting against CSRF attacks

Checklist

  1. Closes

  2. How was this tested:

tested with google auth + ngrok

  1. Any docs updates needed?

mcbryde
mcbryde approved these changes May 19, 2022
View reviewed changes
Copy link

@mcbryde mcbryde left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@feedmeapples feedmeapples merged commit 4284783 into main May 20, 2022
@feedmeapples feedmeapples deleted the csrf branch May 20, 2022 17:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@mcbryde mcbryde mcbryde approved these changes

@GiantRobots GiantRobots GiantRobots approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@feedmeapples @GiantRobots @mcbryde