linx-server

166 Commits

1 Branch

64 Tags

2.0 MiB

Tree: 61147554a9

Commit Graph

Author	SHA1	Message	Date
mutantmonkey	cd83f9f0eb	fix CSP referrer policy The policy of "referrer none" was incorrect and was nonfunctional. With this change, the CSP referrer policy is set to origin, which will causes only the origin to be sent for requests made from the main site. A fix was also needed for referrer checks in two places.	9 years ago
mutantmonkey	39d874374d	trim trailing / for origin checking	9 years ago
mutantmonkey	6ff181facb	add strict referrer check for POST uploads This should protect against cross-site request forgery without the need for cookies. It continues to allow requests with Linx-Delete-Key, Linx-Expiry, or Linx-Randomize headers as these will not be set in the case of cross-site requests.	9 years ago

Author

SHA1

Message

Date

mutantmonkey

cd83f9f0eb

fix CSP referrer policy

The policy of "referrer none" was incorrect and was nonfunctional. With
this change, the CSP referrer policy is set to origin, which
will causes only the origin to be sent for requests made from the main
site.

A fix was also needed for referrer checks in two places.

9 years ago

mutantmonkey

39d874374d

trim trailing / for origin checking

9 years ago

mutantmonkey

6ff181facb

add strict referrer check for POST uploads

This should protect against cross-site request forgery without the need
for cookies. It continues to allow requests with Linx-Delete-Key,
Linx-Expiry, or Linx-Randomize headers as these will not be set in the
case of cross-site requests.

9 years ago

3 Commits (61147554a92c3ddfcf68ec05c43802245c56d9a5)