Jermolene 867488a25b Add custom request header as CSRF mitigation ...

By default we require the header X-Requested-With to be set to TiddlyWiki. Can be overriden by setting csrfdisable to "yes"

See https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#Protecting_REST_Services:_Use_of_Custom_Request_Headers

2018-06-27 19:10:36 +01:00

..

animations

Restored animations for the reveal widget

2013-11-01 17:23:08 +00:00

animator.js

Fix animation behaviour of reveal widget

2013-11-02 09:21:11 +00:00

browser.js

Limited implementation of external text tiddlers in the browser

2015-08-29 16:33:04 +01:00

csscolorparser.js

Provisionally make tag pill foreground colour be responsive

2014-11-06 13:35:48 +00:00

csscolorparser.js.meta

Provisionally make tag pill foreground colour be responsive

2014-11-06 13:35:48 +00:00

dom.js

Mitigate problem with microscropic editor in zoomin view

2018-01-23 16:22:35 +00:00

dragndrop.js

draggable widget: actions on drag-start and drag-end (#3203)

2018-04-08 10:29:17 +01:00

http.js

Add custom request header as CSRF mitigation

2018-06-27 19:10:36 +01:00

keyboard.js

Introduce text editor toolbar (#2315)

2016-04-22 08:36:29 +01:00

modal.js

Refinements to 87fa7f972c

2016-10-18 16:39:18 +01:00

notifier.js

Refinements to 87fa7f972c

2016-10-18 16:39:18 +01:00

popup.js

Fix problem with search popup disappearing

2016-01-03 18:05:08 +00:00

scroller.js

Simplify page scrolling behaviour

2018-01-30 11:29:07 +00:00