5 Commits

Include renames

Author	SHA1	Message	Date
Kharec	2adf72c138	fix(middleware): set CSRF cookie HttpOnly false for double-submit from JS	2026-05-06 20:07:00 +02:00
Kharec	5fc208c9da	fix: only skip CSRF for /api/ routes with Bearer tokens	2026-04-23 13:34:43 +02:00
Kharec	9017816812	refactor: export IsHTTPS function for shared use	2025-12-26 17:40:31 +01:00
Kharec	0802b9dd9d	fix: GetCSRFToken() shouldn't fall back to the cookie	2025-12-26 17:28:10 +01:00
Kharec	71a031342b	To gitea and beyond, let's go(-yco)	2025-11-10 19:12:09 +01:00