fix(csrf): remove all csrf bypass

2020-03-06 17:51:58 +01:00
parent f183df0d88
commit 23b899f50f
20 changed files with 84 additions and 56 deletions
--- a/api-server/server/boot/certificate.js
+++ b/api-server/server/boot/certificate.js
@@ -37,7 +37,7 @@ export default function bootCertificate(app) {
  api.put('/certificate/verify', ifNoUser401, ifNoSuperBlock404, verifyCert);
  api.get('/certificate/showCert/:username/:cert', showCert);

-  app.use('/internal', api);
+  app.use(api);
 }

 const noNameMessage = dedent`