Jermolene 867488a25b Add custom request header as CSRF mitigation ...

By default we require the header X-Requested-With to be set to TiddlyWiki. Can be overriden by setting csrfdisable to "yes"

See https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#Protecting_REST_Services:_Use_of_Custom_Request_Headers

2018-06-27 19:10:36 +01:00

..

commands

Be consistent about lower case parameter names

2018-06-26 15:39:43 +01:00

editor

Add rotate-left button to bitmap editor toolbar

2018-03-12 12:45:56 +00:00

filters

Revert multiple suboperator functionality from the "is" operator

2018-05-10 13:15:49 +01:00

info

Add screen width/height to platform information exposed at startup

2018-03-23 09:13:45 +00:00

macros

Add support for JSON files containing a single tiddler

2017-03-17 14:19:43 +00:00

parsers

Restrict variable substitutions to macros defined with the define pragma

2018-06-15 08:31:02 +01:00

savers

Fix coding standards for put.js

2018-06-13 15:50:47 +01:00

server

Add custom request header as CSRF mitigation

2018-06-27 19:10:36 +01:00

startup

Make tm-full-screen work in all windows (#3334)

2018-06-16 10:03:38 +01:00

storyviews

Revert getTiddlerData() and add getTiddlerDataCached()

2015-07-10 16:43:50 +01:00

upgraders

Revert getTiddlerData() and add getTiddlerDataCached()

2015-07-10 16:43:50 +01:00

utils

Add custom request header as CSRF mitigation

2018-06-27 19:10:36 +01:00

widgets

Remove extraneous debugging code from 35cbb127a3

2018-06-15 11:34:06 +01:00

commander.js

Remove support for verifying optional named command parameters

2018-06-23 16:23:04 +01:00

config.js

Move the wikilink regexps into global config

2014-11-26 11:12:25 +00:00

deserializers.js

Add support for JSON files containing a single tiddler

2017-03-17 14:19:43 +00:00

filters.js

Removed unused vars + some whitespace (#2106)

2016-10-08 13:32:14 +01:00

keyboard.js

Introduce text editor toolbar (#2315)

2016-04-22 08:36:29 +01:00

language.js

Make lazy loading message be translateable

2015-09-08 10:41:27 +01:00

pluginswitcher.js

Add experimental support for RTL languages

2016-08-15 19:47:26 +01:00

saver-handler.js

Rename variable for clarity

2017-02-04 17:24:25 +00:00

story.js

Fix issues with creation and modification dates

2015-09-11 13:34:01 +01:00

syncer.js

Add basic support for detecting readonly status and avoiding write errors

2018-06-27 11:09:42 +01:00

tiddler.js

Add Tiddler.getFieldStrings() method

2017-04-17 17:04:15 +01:00

wiki-bulkops.js

Add several new hooks for UI actions

2017-02-09 15:42:55 +00:00

wiki.js

Display a warning for binary tiddlers in view mode

2018-05-18 17:53:07 +01:00