gitea/features at fbbed8c4c4cdf27c31fbcfc36c6ad20acc3153b7 - gitea - Gitea

Mirrors/gitea

mirror of https://github.com/go-gitea/gitea.git synced 2026-01-23 19:39:59 +01:00

History

silverwind 42d294941c

Replace CSRF cookie with CrossOriginProtection (#36183 )

Removes the CSRF cookie in favor of
[`CrossOriginProtection`](https://pkg.go.dev/net/http#CrossOriginProtection)
which relies purely on HTTP headers.

Fixes: https://github.com/go-gitea/gitea/issues/11188
Fixes: https://github.com/go-gitea/gitea/issues/30333
Helps: https://github.com/go-gitea/gitea/issues/35107

TODOs:

- [x] Fix tests
- [ ] Ideally add tests to validates the protection

---------

Signed-off-by: wxiaoguang <wxiaoguang@gmail.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2025-12-25 12:33:34 +02:00

..

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

Automatic generation of release notes (#35977 )

2025-12-17 02:01:19 +00:00

captcha.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

citation.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

clipboard.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

code-frequency.ts

…

codeeditor.ts

Disable matchBrackets in monaco (#36089 )

2025-12-05 07:06:13 +00:00

colorpicker.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

common-button.test.ts

…

common-button.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

common-fetch-action.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

common-form.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

common-issue-list.test.ts

…

common-issue-list.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

common-organization.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

common-page.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

contributors.ts

…

copycontent.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

dashboard.ts

…

dropzone.ts

Replace CSRF cookie with CrossOriginProtection (#36183 )

2025-12-25 12:33:34 +02:00

emoji.ts

…

eventsource.sharedworker.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

file-fold.ts

…

file-view.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

heatmap.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

imagediff.ts

Fix SVG size calulation, only use style attribute (#36133 )

2025-12-12 09:39:02 +02:00

install.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

issue.ts

…

notification.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

oauth2-settings.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

org-team.ts

Fix package link setting can only list limited repositories (#35394 )

2025-09-11 01:50:17 +02:00

pull-view-file.ts

Replace CSRF cookie with CrossOriginProtection (#36183 )

2025-12-25 12:33:34 +02:00

recent-commits.ts

…

repo-actions.ts

…

repo-branch.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-code.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-commit.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-common.test.ts

…

repo-common.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-diff-commit.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-diff-commitselect.ts

…

repo-diff-filetree.ts

…

repo-diff.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-editor.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-findfile.test.ts

…

repo-findfile.ts

Add "Go to file", "Delete Directory" to repo file list page (#35911 )

2025-11-30 11:58:15 +08:00

repo-graph.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-home.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-issue-content.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-issue-edit.ts

Automatic generation of release notes (#35977 )

2025-12-17 02:01:19 +00:00

repo-issue-list.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-issue-pull.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-issue-sidebar-combolist.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-issue-sidebar.md

…

repo-issue-sidebar.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-issue.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-legacy.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-migrate.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-migration.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-milestone.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-new.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-projects.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-release.test.ts

Automatic generation of release notes (#35977 )

2025-12-17 02:01:19 +00:00

repo-release.ts

Automatic generation of release notes (#35977 )

2025-12-17 02:01:19 +00:00

repo-search.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-settings-branches.test.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-settings-branches.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-settings.ts

Replace CSRF cookie with CrossOriginProtection (#36183 )

2025-12-25 12:33:34 +02:00

repo-unicode-escape.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-view-file-tree.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

repo-wiki.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

sshkey-helper.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

stopwatch.ts

…

tablesort.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

tribute.ts

…

user-auth-webauthn.ts

Fix WebAuthn error checking (#36219 )

2025-12-21 18:24:41 +00:00

user-auth.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00

user-settings.ts

Enable TypeScript strictNullChecks (#35843 )

2025-12-03 02:13:16 +00:00