Oliver Eyton-Williams b3d5cde75e fix(api): csurf to SameSite 'strict', https only (#39077) ...

Lax and http are probably sufficient, but if the stricter versions work
there's no harm using them.

2020-06-16 20:48:48 +05:30

..

add-return-to.js

feat: use eslint with prettier to format code

2019-02-19 14:30:27 +05:30

constant-headers.js

fix: add pass thru for some subdomains (#38315)

2020-03-04 00:02:04 +09:00

cookie-parser.js

chore(server): Move api-server in to it's own DIR

2018-09-03 17:47:48 +05:30

csp.js

fix: NODE_ENV conflicts on pipelines

2019-08-19 01:37:32 +05:30

csurf.js

fix(api): csurf to SameSite 'strict', https only (#39077)

2020-06-16 20:48:48 +05:30

error-handlers.js

feat: enhance dev error reports

2020-03-26 16:51:16 +05:30

express-extensions.js

chore(server): Move api-server in to it's own DIR

2018-09-03 17:47:48 +05:30

flash-cheaters.js

feat: Use prettier-eslint to format code

2019-02-19 14:30:27 +05:30

passport-login.js

fix(auth): Fix auth flow for the client app

2018-10-24 18:27:34 +05:30

request-authorization.js

fix(donate): allow calls to the API without auth

2020-03-21 01:58:07 +05:30

request-authorization.test.js

feat(api): add and update webhooks routing

2020-03-19 17:18:53 +05:30

sentry-error-handler.js

fix: prevent 403 reporting (#38449)

2020-03-26 22:22:57 +05:30

sentry-request-handler.js

feat(api): enable Sentry reporting

2020-03-26 16:51:16 +05:30

sessions.js

chore(server): Move api-server in to it's own DIR

2018-09-03 17:47:48 +05:30

validator.js

chore: refactor and simplify testing (#39050)

2020-06-13 14:57:15 +05:30