mirror of
https://github.com/smogon/pokemon-showdown-client.git
synced 2026-06-02 22:09:20 -05:00
This commit implements the following: - each server now has a separate session with a 'sid' cookie scoped to /~~server:port - 'sid' cookies are now HTTP-only and not accessible in JavaScript - the showdown_token cookie is removed Together, these changes fix various XSS attacks. |
||
|---|---|---|
| .. | ||
| autoresize.jquery.min.js | ||
| battle.js | ||
| battledata.js | ||
| jquery-1.9.0.min.js | ||
| jquery-cookie.js | ||
| jquery.json-2.3.min.js | ||
| ladder.js | ||
| sim.js | ||
| sockjs-0.3.min.js | ||
| soundmanager2.js | ||
| teambuilder.js | ||
| utilichart.js | ||