Guangcong Luo 189a987526 Allow CORS actions with a POSTed sid ... This is mostly useful for the testclient, which otherwise can't interact with the login server without huge hacks like the iframe copy/paste. Requiring an external sid resolves any security issues; sid being the only cookie we use for security-sensitive things, and also being our CSRF token. In theory, this is also useful for clients that don't support cookies, although I'm unsure how they'd get their hands on an sid in the first place. I guess just run login actions?		2019-02-27 05:16:17 -05:00
..
css-sanitizer/Wikimedia/CSS	Use Wikimedia's css sanitizer for custom css parsing (#919)	2017-06-13 23:26:15 -05:00
dispatcher.lib.php	Fix minor bug in dispatcher	2019-01-05 04:04:10 -05:00
ntbb_sessions.sql	Move session library inside repository	2016-10-20 13:16:06 -04:00
ntbb-database.lib.php	Fix UTF-8 support in database	2016-11-04 05:39:27 -04:00
ntbb-friendlist.sql	Friendlist: serverside client code (so that friends can be added etc.)	2013-11-12 23:13:57 +01:00
ntbb-ladder.lib.php	Update decay for Random Battle and OU	2018-03-22 00:33:38 +08:00
ntbb-ladder.sql	Update ntbb_ladder.sql	2016-03-18 11:43:04 -04:00
ntbb-session.lib.php	Allow CORS actions with a POSTed sid	2019-02-27 05:16:17 -05:00
ntbb-users.sql	Move session library inside repository	2016-10-20 13:16:06 -04:00
validate-token.js	Fix some bugs caught by LGTM	2018-09-05 16:48:27 -05:00