mirror of
https://github.com/google/nomulus.git
synced 2025-05-30 01:10:14 +02:00
da5a8796b8
HTML headers can only be sent via JS, we need this change to allow secure POST form submission. The form itself will have a hidden "input" tag with the XSRF token in it. This is how other framework do it as well - see https://en.wikipedia.org/wiki/Cross-site_request_forgery#Synchronizer_token_pattern This is in preparation for the OT&E setup page, which will be a simple form with a "submit" button, so using JS for it is overkill. ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=226178070 |
||
|---|---|---|
| .. | ||
| AppEngineInternalAuthenticationMechanism.java | ||
| Auth.java | ||
| AuthenticatedRegistrarAccessor.java | ||
| AuthenticationMechanism.java | ||
| AuthLevel.java | ||
| AuthModule.java | ||
| AuthResult.java | ||
| BUILD | ||
| LegacyAuthenticationMechanism.java | ||
| OAuthAuthenticationMechanism.java | ||
| OAuthTokenInfo.java | ||
| RequestAuthenticator.java | ||
| UserAuthInfo.java | ||