3 commits

Author	SHA1	Message	Date
Thomas Miceli	662f553d37	Remove CSRF check for Git HTTP packs (#408)	2025-01-20 03:18:28 +01:00
Andreas Jaggi	a752e0561d	Skip CSRF for embeds (#402) ... * Skip CSRF for embeds The CSRF middleware sets a _csrf cookie also for loading the embed javascript on third-party sites. With this change no _csrf cookie is set when loading the embed javascript (regardless if third-party site or first-party).	2025-01-20 02:18:45 +01:00
Thomas Miceli	f935ee1a7e	Refactor server code (#407)	2025-01-20 01:57:39 +01:00