Infrastructure/ghost
0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-03 23:00:14 -05:00
Code Issues Activity
ghost/core/server/web/oauth
History
Thibaut Patel 2bcc934eb4 Disable CSRF on the oauth callback route 
no issue

Keeping CSRF enabled there would prevent oauth from working as users are redirected from the provider domain to the /callback route, where they are logged-in
2021-05-18 20:44:21 +02:00
..
app.js Disable CSRF on the oauth callback route 2021-05-18 20:44:21 +02:00
index.js