Guangcong Luo 189a987526 Allow CORS actions with a POSTed sid ... This is mostly useful for the testclient, which otherwise can't interact with the login server without huge hacks like the iframe copy/paste. Requiring an external sid resolves any security issues; sid being the only cookie we use for security-sensitive things, and also being our CSRF token. In theory, this is also useful for clients that don't support cookies, although I'm unsure how they'd get their hands on an sid in the first place. I guess just run login actions?		2019-02-27 05:16:17 -05:00
..
css-sanitizer/Wikimedia/CSS
dispatcher.lib.php	Fix minor bug in dispatcher	2019-01-05 04:04:10 -05:00
ntbb_sessions.sql
ntbb-database.lib.php
ntbb-friendlist.sql
ntbb-ladder.lib.php
ntbb-ladder.sql
ntbb-session.lib.php	Allow CORS actions with a POSTed sid	2019-02-27 05:16:17 -05:00
ntbb-users.sql
validate-token.js	Fix some bugs caught by LGTM	2018-09-05 16:48:27 -05:00