12 Commits

Author	SHA1	Message	Date
Erik Krogh Kristensen	e061c6a006	add support for more custom CSRF checking middlewares	2020-10-20 15:16:14 +02:00
Erik Krogh Kristensen	ce95676130	add express.csrf as an CSRF protecting middleware	2020-10-19 15:39:02 +02:00
Erik Krogh Kristensen	8206933e85	add test for home grown CSRF protection	2020-10-15 14:51:02 +02:00
Erik Krogh Kristensen	e04404b713	also recognize cookie writes are leading to cookie access	2020-09-28 21:17:25 +02:00
Erik Krogh Kristensen	dafcd59148	add another indirect route-handler test	2020-09-18 09:26:33 +02:00
Erik Krogh Kristensen	43e5c0212c	add basic support for indirect route handlers	2020-09-18 09:26:33 +02:00
Asger Feldthaus	b98db62e82	JS: Recognize req.user a cookie access	2020-01-24 09:44:20 +00:00
Asger Feldthaus	a68bb9ffd1	JS: Ignore calls and csrf/captcha access	2020-01-23 15:32:05 +00:00
Asger Feldthaus	b1ec3e1bf2	JS: Add test and dont check predecessors	2020-01-23 14:59:03 +00:00
Asger F	4797924bea	JS: review comments	2018-09-21 14:46:21 +01:00
Asger F	5f467d2fc5	JS: recognize CSRF middleware from lusca package	2018-09-21 13:15:40 +01:00
Pavel Avgustinov	b55526aa58	QL code and tests for C#/C++/JavaScript.	2018-08-02 17:53:23 +01:00