This repository has been archived by the owner on Mar 31, 2024. It is now read-only.

Implement xsrf protection for 4.2#7

Merged

spalger merged 20 commits into4.2from implement/xsrfProtectionFor4.2

Nov 17, 2015

+357-13

Commits on Nov 10, 2015

[config/schema] wrap schema in a function so that we can have random values
spalger
committed
[server] added xsrf protection
spalger
committed
[server] unpipe from the destination, prevent leaking listeners
spalger
committed
[server/xsrf] added tests
spalger
committed
[server/csrf] allow disabling csrf verification for testing purposes
spalger
committed
[server/csrf] added test to verify ssl behavior
spalger
committed
[server/csrf] cast isSecure to boolean
spalger
committed
[server/xsrf] require more explicit command to disable xsrf
spalger
committed
[server/xsrf] csrf -> xsrf
spalger
committed
[server/xsrf] use the new enabled flag
spalger
committed
[server/csrf] update test to match new strategy
spalger
committed
[xsrf] issue tokens via chrome vars and inject manually
spalger
committed
[chrome/csrf] added tests to verify jQuery and angular injectors
spalger
committed
[server/csrf] don't tack helper methods onto kbnServer
spalger
committed
[chrome/csrf] polish up some tests
spalger
committed
[server/xsrf] shorten the xsrf-token, 512 character is overkill
spalger
committed
[chrome/xsrf] added test for getXsrfToken method
spalger
committed
[config] add not about server.xsrf.token config
spalger
committed
[xsrf] update tests to match 7eefb18
spalger
committed

Commits on Nov 11, 2015

Merge branch '4.2' into implement/xsrfProtectionFor4.2
spalger
committed