Commit Graph

10 Commits

Author SHA1 Message Date
Matthew Noorenberghe dbc1c7b72f Only output the CSRF Try Again button (and add a warning) when ZM_LOG_DEBUG is on. Fixes #2469 2019-02-09 22:39:54 -08:00
Isaac Connor b1cc0c2b82 add CSP nonce to CSRF rewriting 2019-01-16 14:04:07 -05:00
Isaac Connor cb70a3627f Fixes to montagereview and only load event data when in History mode 2017-11-28 14:50:21 -05:00
Isaac Connor c125d22d4d Fix Debug to Logger::Debug 2017-05-18 12:49:59 -04:00
Isaac Connor 92854f5cba more debug 2017-05-05 16:37:30 -04:00
Isaac Connor 1ff367373f use ZM_AUTH_HASH_SECRET for the key, not the secret 2017-05-05 16:15:34 -04:00
Isaac Connor a0e4e6537e prefer key based tokens over session 2017-05-05 16:11:40 -04:00
Isaac Connor 0982c9fdec add Debug lines 2017-05-05 16:00:52 -04:00
Andy Bauer 4e16ae6d19 add ZM_ENABLE_CSRF_MAGIC toggle 2017-03-28 17:29:36 -05:00
Andrew Bauer d38bae72ae integrate csrf-magic library 2017-03-18 20:12:06 -05:00