Code to stop CSRF attacks. - #1

Open

surferjeff wants to merge 31 commits into

mainfrom

Commits on Oct 27, 2023

Attemt to stop CSRF attacks.
jeffrennie
committed
392fdd4
I fail to functional.
jeffrennie
committed
8c9c72b
counterHandler embeds csrf token.
jeffrennie
committed
6e9a55b
403 forbidden for Giraffe.
jeffrennie
committed
f88a1dc
ASP.NET requires the csrf token in the headers AND in the form.
jeffrennie
committed
0035947
Yet another opaque error from F#.
jeffrennie
committed
2b1f220
OMG. CSRF in Fiber is a mess!
jeffrennie
committed
1f66097
Revert "Yet another opaque error from F#."
jeffrennie
committed
a5e8997
Copy and paste anti-forgery code from https://github.com/pimbrouwers/Giraffe.Antiforgery
jeffrennie
committed
2e01459
handleContext() may be the missing piece I've been looking for.
jeffrennie
committed
5223c08
Revert handleContext to match htmlView and htmlNodes
jeffrennie
committed
3f195f5
Merge branch 'main' into csrf
jeffrennie
committed
f7a73b9

Commits on Oct 31, 2023

Apply suggestions from code review

surferjeff
and
twuttiwat
authored
be0d191
Remove counterHandler.
jeffrennie
committed
8bc5e36

Commits on Nov 4, 2023

Revert to version that compiles.
jeffrennie
committed
da7e0d4
pageHandlerAntiforgery
jeffrennie
committed
060d277
checkAntiforgeryTokens
jeffrennie
committed
da1f806
Forbidden without the quotes.
jeffrennie
committed
48131a1
bindAntiforgeryTokens
jeffrennie
committed
dc6a24d
No more pageHandlerAntiforgery.
jeffrennie
committed
de78703
Remove Antiforgery.fs.
jeffrennie
committed
e734a79
rename withAntiforgeryTokens
jeffrennie
committed
0976e72
authorizeRequest simplifies code maybe.
jeffrennie
committed
54f0c7f
getAndStoreAntiforgeryTokens
jeffrennie
committed
43b40f1
Index.cshtml.cs wasn't necessary.
jeffrennie
committed
f64d89d

Commits on Mar 3, 2024

Upgrade GoTemplApp's dependencies.
jeffrennie
committed
5d69959
Fixed /counter
jeffrennie
committed
296a5c6
Add csrf token to /forecasts.
jeffrennie
committed
51a4421

Commits on Aug 28, 2024