about summary refs log tree commit diff
path: root/filters/email-gravatar.lua
diff options
context:
space:
mode:
authorJason A. Donenfeld <Jason@zx2c4.com>2014-01-16 11:39:17 +0100
committerJason A. Donenfeld <Jason@zx2c4.com>2014-01-16 12:13:39 +0100
commitb826537cb4aa2358027ffcb1dd6a87274734e962 (patch)
tree7c749c66d868cb996828d2b65a4bede58b5ebd62 /filters/email-gravatar.lua
parentauth: add basic authentication filter framework (diff)
downloadcgit-pink-b826537cb4aa2358027ffcb1dd6a87274734e962.tar.gz
cgit-pink-b826537cb4aa2358027ffcb1dd6a87274734e962.zip
authentication: use hidden form instead of referer
This also gives us some CSRF protection. Note that we make use of the
hmac to protect the redirect value.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Diffstat (limited to 'filters/email-gravatar.lua')
0 files changed, 0 insertions, 0 deletions
ow=1'>cgitrc.5.txt: Specify when scan-path must be defined before.Jason A. Donenfeld 2013-04-10ui-snapshot.c: Prepend "V" when guessing ref namesLukas Fleischer 2013-04-10t0107: Skip ZIP tests if unzip(1) isn't availableLukas Fleischer 2013-04-10tests/: Do not use `sed -i`Lukas Fleischer 2013-04-10Add branch-sort and repo.branch-sort options.Jason A. Donenfeld 2013-04-10t0109: chain operations with &&John Keeping 2013-04-10cgit.c: Do not restore unset environment variablesLukas Fleischer 2013-04-09t0107: Use `tar -z` for gzip'ed archivesLukas Fleischer