3 Commits

Author	SHA1	Message	Date
silverwind	42d294941c	Replace CSRF cookie with CrossOriginProtection (#36183) ... Removes the CSRF cookie in favor of [`CrossOriginProtection`](https://pkg.go.dev/net/http#CrossOriginProtection) which relies purely on HTTP headers. Fixes: https://github.com/go-gitea/gitea/issues/11188 Fixes: https://github.com/go-gitea/gitea/issues/30333 Helps: https://github.com/go-gitea/gitea/issues/35107 TODOs: - [x] Fix tests - [ ] Ideally add tests to validates the protection --------- Signed-off-by: wxiaoguang <wxiaoguang@gmail.com> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>	2025-12-25 12:33:34 +02:00
silverwind	7207d93f01	Fix a number of Typescript issues (#31877) ... Typescript error count is reduced from 633 to 540 with this. No runtime changes except in test code.	2024-08-28 18:32:38 +02:00
silverwind	5791a73e75	Convert frontend code to typescript (#31559) ... None of the frontend js/ts files was touched besides these two commands (edit: no longer true, I touched one file in https://github.com/go-gitea/gitea/pull/31559/commits/61105d0618e285d97e95044bfb64415f364a4526 because of a deprecation that was not showing before the rename). `tsc` currently reports 778 errors, so I have disabled it in CI as planned. Everything appears to work fine.	2024-07-07 15:32:30 +00:00