- 28 Sep, 2015 2 commits
-
-
Ben Patterson committed
-
* Upgrade edx-submissions * Upgrade edx-ora2 * Upgrade edx-val * Upgrade edx-proctoring * Update all edx-platform code that depends on DRF, including: - auth_exchange - cors_csrf - embargo - enrollment - util - commerce - course_structure - discussion_api - mobile_api - notifier_api - teams - credit - profile_images - user_api - lib/api (OAuth2 and pagination)
Will Daly committed
-
- 25 Sep, 2015 1 commit
-
-
* Upgrade edx-submissions * Upgrade edx-ora2 * Upgrade edx-val * Upgrade edx-proctoring * Update all edx-platform code that depends on DRF, including: - auth_exchange - cors_csrf - embargo - enrollment - util - commerce - course_structure - discussion_api - mobile_api - notifier_api - teams - credit - profile_images - user_api - lib/api (OAuth2 and pagination)
Will Daly committed
-
- 03 Apr, 2015 1 commit
-
-
Adds an /xdomain_proxy.html endpoint that serves the proxy file from the xdomain library. This allows IE9 users to iframe in the proxy page to simulate a cross-domain request with cookies.
Will Daly committed
-
- 01 Apr, 2015 1 commit
-
-
Adds an /xdomain_proxy.html endpoint that serves the proxy file from the xdomain library. This allows IE9 users to iframe in the proxy page to simulate a cross-domain request with cookies.
Will Daly committed
-
- 18 Mar, 2015 1 commit
-
-
Brian Wilson committed
-
- 16 Mar, 2015 1 commit
-
-
This commit extends the workaround in `cors_csrf` middleware to Django Rest Framework's SessionAuthentication, which calls Django's CSRF middleware directly. The workaround checks the cross domain whitelist and skips the CSRF referer check for domains on the whitelist.
Will Daly committed
-
- 11 Mar, 2015 1 commit
-
-
When configured, set an additional cookie with the CSRF token for use by subdomains. The cookie can have a different name than the default CSRF cookie, preventing conflicts between cookies from different domains (e.g. ".edx.org", "courses.edx.org", and "edge.edx.org"). The new cookie is included only on the enrollment API views so that the scope of this change is limited to the end-points that require cross-domain POST requests.
Will Daly committed
-
- 09 Mar, 2015 1 commit
-
-
When configured, set an additional cookie with the CSRF token for use by subdomains. The cookie can have a different name than the default CSRF cookie, preventing conflicts between cookies from different domains (e.g. ".edx.org", "courses.edx.org", and "edge.edx.org"). The new cookie is included only on the enrollment API views so that the scope of this change is limited to the end-points that require cross-domain POST requests.
Will Daly committed
-
