Smarter CSRF handling. (#1211) (6c9c59b2) · Commits · ubl / finc / vufind

Snippets Groups Projects

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

There was an error fetching the commit references. Please try again later.

Commit 6c9c59b2 authored 6 years ago by

Demian Katz Committed by GitHub 6 years ago

Browse files

Smarter CSRF handling. (#1211)

- Do not create multiple tokens per request.
- Clear tokens after successful verification to save session space.
- Limit the number of tokens that can be generated before successful verification.

parent 80e9148e

No related merge requests found

Hide whitespace changes

Inline Side-by-side

Showing with 190 additions and 18 deletions

Please register or to comment

Admin message

Smarter CSRF handling. (#1211)