Nick Steel
10fafc0228
http: Add config option to control CSRF protection ( Fixes : #1713 )
...
Allows users to disable CSRF protection and revert to the HTTP server's
previous (less secure) behaviour. Users are advised to leave this config
value enabled if possible. However, if disabled this will:
* Remove the requirement to set a ``Content-Type: application/json``
header for JSON-RPC POST requests.
* Disable all same-origin checks, effectively ignoring the ``allowed_origins``
config since requests from any origin will be allowed.
* Suppress all ``Access-Control-Allow-*`` response headers.
2018-10-15 17:24:45 +01:00
Nick Steel
1b863b417b
HTTP: New RPC CORS tests and fixed existing.
2018-04-15 17:12:16 +01:00
Stein Magnus Jodal
c4940cbea2
autopep8: Add space after class signature/docstring
2015-04-03 00:05:26 +02:00
Stein Magnus Jodal
496142c201
py3: Use absolute imports by default
2014-12-07 20:17:10 +01:00
Stein Magnus Jodal
3fac0cb8de
http: Split socket and server creation
2014-07-17 01:13:48 +02:00
Stein Magnus Jodal
aed8670797
http: Fix flake8 warnings
2014-06-22 09:53:03 +02:00
Stein Magnus Jodal
9f925570d2
http: Redirect from root to /mopidy/ if no static_dir app
2014-06-22 01:24:57 +02:00
Stein Magnus Jodal
6596871918
http: Test serving og legacy static_dir apps
2014-06-22 01:22:22 +02:00
Stein Magnus Jodal
5861071bb1
http: List installed web clients at /mopidy/
2014-06-22 00:39:54 +02:00
Stein Magnus Jodal
59760bb36c
web: Remove WebSocket demo page
2014-06-21 23:27:35 +02:00
Stein Magnus Jodal
fbcc73004d
http: Redirect from /app to /app/
2014-06-21 16:36:16 +02:00
Stein Magnus Jodal
6c6600c37b
http: Group HTTP server tests
2014-06-21 16:21:39 +02:00
dz0ny
7c428ce8d2
Fix http router so it can handle /{ext_name} same as /{ext_name}/
2014-06-21 15:05:13 +02:00
Stein Magnus Jodal
33228f2528
http: Simplify app registration
2014-06-04 21:32:19 +02:00
Stein Magnus Jodal
eea6138b3d
http: Simplify static files serving
2014-06-04 20:47:49 +02:00
Stein Magnus Jodal
684a64405d
http: Move MopidyHttpRouter into handlers module
2014-05-22 21:03:42 +02:00
Stein Magnus Jodal
1223103e8f
http: Test that routers can mount WSGI apps
2014-05-21 00:38:38 +02:00
Stein Magnus Jodal
4b383c1762
http: Move Mopidy request handlers to a MopidyHttpRouter
2014-05-20 23:49:22 +02:00
Stein Magnus Jodal
5897675eab
http: Split tests into three files
2014-05-20 23:07:28 +02:00
