1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2025-03-23 21:34:24 +00:00
hedgedoc/lib
Dexter Chua a88b4aff2a Generic OAuth2: Set state: true
The OAuth2 specification RECOMMENDS setting the state to protect against
CSRF attacks. Some OAuth2 providers (e.g. ORY Hydra) refuse to
authenticate without the state set.

This is a cherry-pick of 852868419d.

Signed-off-by: haslersn <sebastian.hasler@gmx.net>
2020-10-22 22:50:34 +02:00
..
config Update documentation and messages to new default value 2020-09-08 09:58:15 +02:00
migrations Add fix for missing deletion of notes on user-deletion request 2020-03-21 16:14:43 +01:00
models Fixed meta parsing of lang-attribute for using it in the published-view 2020-07-04 03:37:19 +02:00
ot
web Generic OAuth2: Set state: true 2020-10-22 22:50:34 +02:00
workers
csp.js Add missing unsafe-inline CSP directive 2020-08-23 01:29:53 +02:00
errors.js Fix broken redirect on login 2020-03-21 16:56:09 +01:00
history.js Move note actions to their own file. 2019-10-27 13:51:53 +01:00
letter-avatars.js
logger.js
realtime.js
response.js Move showPublishNote and publishNoteActions to note controller 2019-10-27 15:23:38 +01:00
utils.js Move slide actions to own file 2019-10-27 14:27:15 +01:00