Andrew Dolgov
d466284fab
* customizeCSS: client dialog
...
* remove hardcoded width from most dialogs (move to css)
* add helper to easily get dialog from its widget
* rework some dialog buttons to use current object instead of calling dialog by name
4 years ago
Andrew Dolgov
eac7ad5d34
remove explainError server-side dlg
4 years ago
Andrew Dolgov
74986d1ac6
shorten pref tab names; make log-alert clickable
4 years ago
Andrew Dolgov
0e4e0e624e
viewfeed debugger: open properly for categories
4 years ago
Andrew Dolgov
d06cc8267b
queryFeedHeadlines: bring back DISTINCT for a limited set of columns
4 years ago
Andrew Dolgov
db3fcb861b
viewfeed: reintroduce timestamps, fix debugging, fix some indents
4 years ago
Andrew Dolgov
0a142912d3
backend handler: require CSRF, remove obsolete code
4 years ago
Andrew Dolgov
154417d80b
public/logout: require valid CSRF token
4 years ago
Andrew Dolgov
8080c525fd
- backend: require CSRF token to be passed via POST
...
- do not leak CSRF token via GET request in feed debugger
- rework Article/redirect to use POST
4 years ago
Andrew Dolgov
7e50c6c4b5
- enable CSRF support earlier
...
- remove rpc/sanityCheck from CSRF-excluded calls
4 years ago
Andrew Dolgov
b4cb67e77f
remove csrf token from rpc method sanityCheck
4 years ago
Andrew Dolgov
d01ad09800
eslint-related fixes; move a few things from global context to App
4 years ago
Andrew Dolgov
88027d7a39
fix various minor issues reported by eslint
4 years ago
Andrew Dolgov
9d28b3ac50
unify prefs/main App objects, remove fake classes, use single static App object instead
4 years ago