google-nomulus/java/google/registry
guyben da5a8796b8 Allow XSRF to be sent as POST parameter in addition to HTML header
HTML headers can only be sent via JS, we need this change to allow
secure POST form submission.

The form itself will have a hidden "input" tag  with the XSRF token in it. This
is how other framework do it as well - see
https://en.wikipedia.org/wiki/Cross-site_request_forgery#Synchronizer_token_pattern

This is in preparation for the OT&E setup page, which will be a simple form
with a "submit" button, so using JS for it is overkill.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=226178070
2018-12-20 07:46:33 -05:00
..
backup Clean up third_party imports in BUILD files 2018-07-14 01:11:51 -04:00
batch Update lastEppUpdateTime and lastEppUpdateClientId when necessary 2018-12-03 19:13:55 -05:00
beam Switch all added usages of java.time to be joda.time 2018-12-12 13:22:34 -05:00
bigquery Account for GoogleJsonResponseException#getDetails returning null 2018-12-03 19:09:11 -05:00
builddefs Replace iteration over depsets with an explicit .to_list() call 2018-11-14 11:55:43 -05:00
config Allow unsetting of the support email group, disabling "support users" 2018-12-20 07:46:33 -05:00
cron Clean up third_party imports in BUILD files 2018-07-14 01:11:51 -04:00
dns Make loadByForeignKey() and related methods return Optional 2018-12-14 11:24:49 -05:00
env Backup Datastore using the Admin REST API 2018-12-12 13:22:34 -05:00
export Backup Datastore using the Admin REST API 2018-12-12 13:22:34 -05:00
flows Make loadByForeignKey() and related methods return Optional 2018-12-14 11:24:49 -05:00
gcs Clean up annotation imports in BUILD files 2018-06-27 15:28:53 -04:00
groups Account for GoogleJsonResponseException#getDetails returning null 2018-12-03 19:09:11 -05:00
idn Update IDN tables to comply with https://www.iana.org/help/idn-repository-procedure 2018-02-01 21:59:14 -05:00
keyring Remove the ability to download service account credentials 2018-12-05 16:00:51 -05:00
loadtest Clean up annotation imports in BUILD files 2018-06-27 15:28:53 -04:00
mapreduce Use locking on async mapreduces 2018-08-10 13:44:25 -04:00
model Create OT&E entities directly, instead of calling sub-commands 2018-12-20 07:46:33 -05:00
module Isolate customizable code in activity reporting 2018-12-13 15:07:29 -05:00
monitoring/whitebox Stop exporting EPP flow metrics to BigQuery 2018-10-08 16:59:29 -04:00
pricing Clean up third_party imports in BUILD files 2018-07-14 01:11:51 -04:00
proxy Use gson to make JSON string in proxy log formatter 2018-12-12 13:22:34 -05:00
rdap Make loadByForeignKey() and related methods return Optional 2018-12-14 11:24:49 -05:00
rde Make loadByForeignKey() and related methods return Optional 2018-12-14 11:24:49 -05:00
reporting Isolate customizable code in activity reporting 2018-12-13 15:07:29 -05:00
request Allow XSRF to be sent as POST parameter in addition to HTML header 2018-12-20 07:46:33 -05:00
security Allow XSRF to be sent as POST parameter in addition to HTML header 2018-12-20 07:46:33 -05:00
storage/drive Clean up third_party imports in BUILD files 2018-07-14 01:11:51 -04:00
tldconfig/idn Remove the use of InjectRule in IdnLabelValidatorTest 2018-10-22 18:54:53 -04:00
tmch Refactor TmchCertificateAuthority 2018-10-25 14:40:38 -04:00
tools Add the ability to provide credential JSON file to the nomulus tool 2018-12-20 07:46:33 -05:00
ui Set a "nicer" margin value for textareas 2018-12-20 07:46:33 -05:00
util Isolate customizable code in activity reporting 2018-12-13 15:07:29 -05:00
whois Make loadByForeignKeyCached() return an Optional type 2018-12-12 13:22:34 -05:00
xjc Run bazel installer as a argument to bash 2018-08-10 13:44:25 -04:00
xml Pretty-print actual XML in tests 2018-07-14 01:37:03 -04:00
BUILD Remove deprecated DNS subsystem 2018-09-14 12:01:08 -04:00
repositories.bzl Add an option to perform login on remote machines 2018-12-12 13:22:34 -05:00