[PR #4788] [CLOSED] raw url encode csrf token without padding #17497

Closed
opened 2025-11-02 13:40:52 -06:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/go-gitea/gitea/pull/4788
Author: @beeonthego
Created: 8/25/2018
Status: Closed

Base: masterHead: master


📝 Commits (3)

  • 0d4ba78 remove padding from csrf token
  • ab1c309 Merge pull request #1 from beeonthego/beeonthego-csrf-encoding
  • 20f6247 restore csrf token encoding to URLEncoding

📄 Description

This prepares the token to use in query string to guard against csrf annoyances on GET routes such as /logout.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/go-gitea/gitea/pull/4788 **Author:** [@beeonthego](https://github.com/beeonthego) **Created:** 8/25/2018 **Status:** ❌ Closed **Base:** `master` ← **Head:** `master` --- ### 📝 Commits (3) - [`0d4ba78`](https://github.com/go-gitea/gitea/commit/0d4ba783eedf5c93bf48ae5200721f91d8af8118) remove padding from csrf token - [`ab1c309`](https://github.com/go-gitea/gitea/commit/ab1c30994e35c93b0f00852feb741fc3dc539d9c) Merge pull request #1 from beeonthego/beeonthego-csrf-encoding - [`20f6247`](https://github.com/go-gitea/gitea/commit/20f6247c57d8e4d0cbeecaf20e2952b98d7fcdf7) restore csrf token encoding to URLEncoding ### 📄 Description This prepares the token to use in query string to guard against csrf annoyances on GET routes such as /logout. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2025-11-02 13:40:52 -06:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#17497