google-nomulus/java/google/registry/request
guyben da5a8796b8 Allow XSRF to be sent as POST parameter in addition to HTML header
HTML headers can only be sent via JS, we need this change to allow
secure POST form submission.

The form itself will have a hidden "input" tag  with the XSRF token in it. This
is how other framework do it as well - see
https://en.wikipedia.org/wiki/Cross-site_request_forgery#Synchronizer_token_pattern

This is in preparation for the OT&E setup page, which will be a simple form
with a "submit" button, so using JS for it is overkill.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=226178070
2018-12-20 07:46:33 -05:00
..
auth Allow XSRF to be sent as POST parameter in addition to HTML header 2018-12-20 07:46:33 -05:00
lock Use locking on async mapreduces 2018-08-10 13:44:25 -04:00
Action.java Clean up some code quality issues 2017-12-01 22:14:06 -05:00
Actions.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
BUILD Add metrics measuring all request processing times 2018-10-31 19:11:39 -04:00
FullServletPath.java Derive RDAP link paths from the received query 2017-11-07 17:24:20 -05:00
Header.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
HttpException.java Move AuthenticatedRegistrarAccessor to request/auth/ 2018-11-16 16:54:21 -05:00
JsonActionRunner.java Remove unnecessary Dagger qualifier 2018-12-03 18:59:40 -05:00
JsonPayload.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
JsonResponse.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
Modules.java Remove outdated credential modules 2018-10-03 12:08:55 -04:00
package-info.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
Parameter.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
ParameterMap.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
Payload.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
RequestComponentBuilder.java Remove Builder type param on RequestComponentBuilder/RequestHandler 2017-02-27 11:12:07 -05:00
RequestHandler.java Add metrics measuring all request processing times 2018-10-31 19:11:39 -04:00
RequestLogId.java Add tool to check if other requests are still running 2017-09-12 15:51:50 -04:00
RequestMethod.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
RequestMetrics.java Add metrics measuring all request processing times 2018-10-31 19:11:39 -04:00
RequestModule.java Add next page navigation for RDAP nameserver searches 2017-12-27 10:44:05 -05:00
RequestParameters.java Remove transition code for set of parameter refactoring 2018-07-14 01:37:03 -04:00
RequestPath.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
RequestScope.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
RequestUrl.java Add next page navigation for RDAP nameserver searches 2017-12-27 10:44:05 -05:00
Response.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
ResponseImpl.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
Route.java Replace com.google.common.base.Function with java.util.function.Function 2017-12-27 11:08:55 -05:00
Router.java Replace com.google.common.base.Function with java.util.function.Function 2017-12-27 11:08:55 -05:00
RouterDisplayHelper.java Run automatic Java 8 conversion over codebase 2017-10-10 12:09:41 -04:00