Guangcong Luo 189a987526 Allow CORS actions with a POSTed sid ...

This is mostly useful for the testclient, which otherwise can't interact
with the login server without huge hacks like the iframe copy/paste.

Requiring an external sid resolves any security issues; sid being the
only cookie we use for security-sensitive things, and also being our
CSRF token.

In theory, this is also useful for clients that don't support cookies,
although I'm unsure how they'd get their hands on an sid in the first
place. I guess just run login actions?

2019-02-27 05:16:17 -05:00

..

css-sanitizer/Wikimedia/CSS

Use Wikimedia's css sanitizer for custom css parsing (#919)

2017-06-13 23:26:15 -05:00

dispatcher.lib.php

Fix minor bug in dispatcher

2019-01-05 04:04:10 -05:00

ntbb_sessions.sql

Move session library inside repository

2016-10-20 13:16:06 -04:00

ntbb-database.lib.php

Fix UTF-8 support in database

2016-11-04 05:39:27 -04:00

ntbb-friendlist.sql

Friendlist: serverside client code (so that friends can be added etc.)

2013-11-12 23:13:57 +01:00

ntbb-ladder.lib.php

Update decay for Random Battle and OU

2018-03-22 00:33:38 +08:00

ntbb-ladder.sql

Update ntbb_ladder.sql

2016-03-18 11:43:04 -04:00

ntbb-session.lib.php

Allow CORS actions with a POSTed sid

2019-02-27 05:16:17 -05:00

ntbb-users.sql

Move session library inside repository

2016-10-20 13:16:06 -04:00

validate-token.js

Fix some bugs caught by LGTM

2018-09-05 16:48:27 -05:00