7 commits

Author	SHA1	Message	Date
Mike Perham	55ced28181	Update standard rules (#5360) ... * update standard rules and run standard:fix * Fix more standard errors * standardize	2022-06-05 07:44:52 -07:00
Sam	0724848bf1	Update last of spec files to use it and describe, instead od minitest (#5357)	2022-06-02 10:31:42 -07:00
Mike Perham	5776c7ae87	standard:fix the testsuite codebase, no functional changes	2022-03-03 12:51:10 -08:00
Jared Szechy	09305a0909	Fix handling of no session (#4731)	2020-11-04 09:09:30 -08:00
basherru	df702a16ce	check if session object is not empty in csrf protection (#4672) ... Co-authored-by: basherru <alexander.baz@okwork.io>	2020-08-19 10:39:30 -07:00
Mike Perham	eb2a6ab497	refactoring	2020-06-03 22:11:18 -07:00
Mike Perham	47bc87034f	Refactor and clean up CSRF protection code ... 1. Remove unused methods 2. Remove unused and unnecessary features 3. Add basic tests The session token is stored server-side and never given to the client. A masked token is generated for each request which can be inserted into forms to be POSTed.	2020-06-03 16:06:36 -07:00