about summary refs log tree commit diff
path: root/ui-blob.c
diff options
context:
space:
mode:
authorJason A. Donenfeld <Jason@zx2c4.com>2014-01-16 11:39:17 +0100
committerJason A. Donenfeld <Jason@zx2c4.com>2014-01-16 12:13:39 +0100
commitb826537cb4aa2358027ffcb1dd6a87274734e962 (patch)
tree7c749c66d868cb996828d2b65a4bede58b5ebd62 /ui-blob.c
parentauth: add basic authentication filter framework (diff)
downloadcgit-pink-b826537cb4aa2358027ffcb1dd6a87274734e962.tar.gz
cgit-pink-b826537cb4aa2358027ffcb1dd6a87274734e962.zip
authentication: use hidden form instead of referer
This also gives us some CSRF protection. Note that we make use of the
hmac to protect the redirect value.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions