Eelco Dolstra c928c41ee1 Add XSRF protection for POST requests ...

Some Hydra API requests were vulnerable to XSRF attacks, e.g. you
could have a form on another website using http://hydra/logout as the
form action. So we now require POST requests to come from the same
origin.

Reported by Hans-Christian Esperer.

2016-10-20 16:11:33 +02:00

..

Base/Controller

Fix latest-finished

2016-03-02 18:06:20 +01:00

Component

Get rid of old ToJSON code path

2013-10-25 11:09:11 -04:00

Controller

Add XSRF protection for POST requests

2016-10-20 16:11:33 +02:00

Helper

Test: Show error output from hydra-queue-runner on timeout

2016-10-06 17:18:59 +02:00

Model

Turn prepared statements back on

2013-02-25 21:20:52 +01:00

Plugin

GithubStatus: Include the full job name and build ID in the context.

2016-04-12 15:19:05 -04:00

Schema

Allow public dashboards

2016-05-27 14:35:32 +02:00

Script

Use CatalystX::Script::Server::Starman

2011-11-22 16:44:32 +01:00

View

Use pixz instead of bzip2 for compressing nars

2016-08-12 11:39:07 +02:00

Plugin.pm

Provide a plugin hook for when build steps finish

2016-05-27 14:35:32 +02:00

Schema.pm

Keep track of the database schema version

2011-12-05 14:29:29 +01:00