google-nomulus/javatests/google/registry
guyben da5a8796b8 Allow XSRF to be sent as POST parameter in addition to HTML header
HTML headers can only be sent via JS, we need this change to allow
secure POST form submission.

The form itself will have a hidden "input" tag  with the XSRF token in it. This
is how other framework do it as well - see
https://en.wikipedia.org/wiki/Cross-site_request_forgery#Synchronizer_token_pattern

This is in preparation for the OT&E setup page, which will be a simple form
with a "submit" button, so using JS for it is overkill.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=226178070
2018-12-20 07:46:33 -05:00
..
backup Clean up third_party imports in BUILD files 2018-07-14 01:11:51 -04:00
batch Make loadByForeignKey() and related methods return Optional 2018-12-14 11:24:49 -05:00
beam Run the Spec11 pipeline daily without sending emails 2018-12-12 13:22:34 -05:00
bigquery Use @DefaultCredential for Cloud API access in GAE 2018-09-20 11:19:36 -04:00
builddefs Format .bzl files with buildifier 2018-07-14 01:37:03 -04:00
config Configure client id and client secret in the config file 2018-12-05 16:04:08 -05:00
cron Clean up third_party imports in BUILD files 2018-07-14 01:11:51 -04:00
dns Make loadByForeignKey() and related methods return Optional 2018-12-14 11:24:49 -05:00
export Backup Datastore using the Admin REST API 2018-12-12 13:22:34 -05:00
flows Make loadByForeignKey() and related methods return Optional 2018-12-14 11:24:49 -05:00
groups Add support G-Suite group whose members have ADMIN access to registrar console 2018-11-12 14:51:40 -05:00
keyring Remove the ability to download service account credentials 2018-12-05 16:00:51 -05:00
mapreduce/inputs Clean up internal imports in BUILD files 2018-07-14 01:37:03 -04:00
model Create OT&E entities directly, instead of calling sub-commands 2018-12-20 07:46:33 -05:00
module Backup Datastore using the Admin REST API 2018-12-12 13:22:34 -05:00
monitoring/whitebox Stop exporting EPP flow metrics to BigQuery 2018-10-08 16:59:29 -04:00
pricing Clean up third_party imports in BUILD files 2018-07-14 01:11:51 -04:00
proxy Make FOSS proxy treat connections with unknown sources more gracefully 2018-12-12 13:22:34 -05:00
rdap Move AuthenticatedRegistrarAccessor to request/auth/ 2018-11-16 16:54:21 -05:00
rde Update lastEppUpdateTime after certain grace period is passed 2018-12-12 13:22:34 -05:00
reporting Isolate customizable code in activity reporting 2018-12-13 15:07:29 -05:00
request Allow XSRF to be sent as POST parameter in addition to HTML header 2018-12-20 07:46:33 -05:00
security Improve internal build system speed 2018-06-27 15:28:52 -04:00
server Delete all Braintree code 2018-07-14 01:37:03 -04:00
storage/drive Merge JUnitBackport's expectThrows into assertThrows 2018-03-06 18:56:15 -05:00
testing Remove all mentions of MOE in the code base 2018-12-13 15:09:09 -05:00
tldconfig/idn Remove the use of InjectRule in IdnLabelValidatorTest 2018-10-22 18:54:53 -04:00
tmch Refactor TmchCertificateAuthority 2018-10-25 14:40:38 -04:00
tools Add the ability to provide credential JSON file to the nomulus tool 2018-12-20 07:46:33 -05:00
ui Use goog.html.testing instead of legacy conversions in test 2018-12-12 13:22:34 -05:00
util Isolate customizable code in activity reporting 2018-12-13 15:07:29 -05:00
whois Make loadByForeignKeyCached() return an Optional type 2018-12-12 13:22:34 -05:00
xjc Clean up internal imports in BUILD files 2018-07-14 01:37:03 -04:00
xml Remove unnecessary "throws" declarations 2018-06-18 18:17:56 -04:00