Skip to content
Snippets Groups Projects
  1. Mar 11, 2015
    • Adam Palay's avatar
      882eab4b
    • Will Daly's avatar
      Cross-domain CSRF cookies · a5a303ae
      Will Daly authored
      When configured, set an additional cookie with the CSRF
      token for use by subdomains.
      
      The cookie can have a different name than the default
      CSRF cookie, preventing conflicts between cookies
      from different domains (e.g. ".edx.org", "courses.edx.org",
      and "edge.edx.org").
      
      The new cookie is included only on the enrollment API
      views so that the scope of this change is limited
      to the end-points that require cross-domain POST requests.
      a5a303ae
  2. Mar 10, 2015
  3. Mar 09, 2015
  4. Mar 06, 2015
Loading