Andreas Jaggi 9d59a92c96 Skip CSRF for embeds ... The CSRF middleware sets a _csrf cookie also for loading the embed javascript on third-party sites. With this change no _csrf cookie is set when loading the embed javascript (regardless if third-party site or first-party).		2024-12-17 21:05:03 +01:00
..
test	Fix Markdown preview (#368)	2024-11-02 01:05:43 +01:00
admin.go	Add Postgres and MySQL databases support (#335)	2024-09-20 16:01:09 +02:00
auth.go	Use mail handle if oauth nickname is empty (#362)	2024-10-31 18:24:15 +01:00
gist.go	Fix escaping for embed gists (#381)	2024-11-18 02:29:05 +01:00
git_http.go	Fix perms for http/ssh clone (#288)	2024-05-28 01:30:08 +02:00
healthcheck.go	Add dummy /metrics endpoint (#327)	2024-09-12 01:45:30 +02:00
server.go	Skip CSRF for embeds	2024-12-17 21:05:03 +01:00
settings.go	Add TOTP MFA (#342)	2024-10-24 23:23:00 +02:00
util.go	Change json response detection (#361)	2024-10-31 14:41:42 +01:00