-
-
Notifications
You must be signed in to change notification settings - Fork 5.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix bug manifest.json will not request with cookie so that session will created every request #6372
Conversation
…ll created every request
Codecov Report
@@ Coverage Diff @@
## master #6372 +/- ##
=========================================
Coverage ? 38.87%
=========================================
Files ? 365
Lines ? 51341
Branches ? 0
=========================================
Hits ? 19957
Misses ? 28511
Partials ? 2873 Continue to review full report at Codecov.
|
@FloThinksPi My first idea is same as you to disable session on public resources. But I found I'm not familiar with macaron enough to do that in a short time and I think I will send another PR to do that. |
Yea this will do it as quick fix 👍 |
@lunny please create backport PRs |
@FloThinksPi Yes, please. And I think maybe some other resources routes should also disable session. |
…ll created every request (go-gitea#6372)
…ll created every request (go-gitea#6372)
Deleted my comments cause i will send it to security@gitea just to be sure. |
Will fix #6320
refs:
home-assistant/frontend#940
https://developer.mozilla.org/en-US/docs/Web/HTML/Element/link