summary refs log tree commit diff homepage
path: root/2017/.gitignore
diff options
context:
space:
mode:
authorJune McEnroe <june@causal.agency>2018-12-23 22:47:52 -0500
committerJune McEnroe <june@causal.agency>2018-12-23 22:47:52 -0500
commite01295c03d5a0c8affeb9cc9acda01223e5f8a89 (patch)
treebe9a7936cca4cc769aa1ed8947b982c8312eec08 /2017/.gitignore
parentSolve day 23 part 1 (diff)
downloadaoc-e01295c03d5a0c8affeb9cc9acda01223e5f8a89.tar.gz
aoc-e01295c03d5a0c8affeb9cc9acda01223e5f8a89.zip
Solve day 22 part 2
Diffstat (limited to '2017/.gitignore')
0 files changed, 0 insertions, 0 deletions
 

generated by cgit-pink 1.4.1 (git 2.36.1) at 2026-03-28 18:43:45 +0000


 


563c48de5572f78b50392&follow=1'>auth: lua string comparisons are time invariantJason A. Donenfeld

By default, strings are compared by hash, so we can remove this comment.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-16authentication: use hidden form instead of refererJason A. Donenfeld

This also gives us some CSRF protection. Note that we make use of the
hmac to protect the redirect value.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-16auth: add basic authentication filter frameworkJason A. Donenfeld

This leverages the new lua support. See
filters/simple-authentication.lua for explaination of how this works.
There is also additional documentation in cgitrc.5.txt.

Though this is a cookie-based approach, cgit's caching mechanism is
preserved for authenticated pages.

Very plugable and extendable depending on user needs.

The sample script uses an HMAC-SHA1 based cookie to store the
currently logged in user, with an expiration date.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-16t0111: Additions and fixesLukas Fleischer

* Rename the capitalize-* filters to dump.* since they also dump the
  arguments.

* Add full argument validation to the email filters.

Signed-off-by: Lukas Fleischer <cgit@cryptocrack.de>



2014-01-16parsing.c: Remove leading space from committerLukas Fleischer