summaryrefslogtreecommitdiff
path: root/docs/internals/contributing/writing-code
diff options
context:
space:
mode:
authorJoshua Kehn <josh@kehn.us>2015-08-31 22:32:03 -0400
committerTim Graham <timograham@gmail.com>2015-09-05 09:19:57 -0400
commitab26b65b2f178597be845e203eb698e193e3502e (patch)
tree0373fa71f7f14e4bd4b24efe36554741144209ba /docs/internals/contributing/writing-code
parent48c420d99209b147b58d7b873d1b54f76249c8dc (diff)
Fixed #25334 -- Provided a way to allow cross-origin unsafe requests over HTTPS.
Added the CSRF_TRUSTED_ORIGINS setting which contains a list of other domains that are included during the CSRF Referer header verification for secure (HTTPS) requests.
Diffstat (limited to 'docs/internals/contributing/writing-code')
0 files changed, 0 insertions, 0 deletions