Archives/gristlabs_grist-core
1
0
Fork 0
mirror of https://github.com/gristlabs/grist-core.git synced 2024-10-27 20:44:07 +00:00
Code Issues Projects Releases Wiki Activity
e590e65a3f
gristlabs_grist-core/test
History
Alex Hall e590e65a3f (core) Allow requests from untrusted origins but without credentials 
Summary:
Allow requests from untrusted origins instead of returning an error, but don't allow credentials (Cookie header) or API keys (Authorization header).

Allow setting the header `Content-type: application/json` as an alternative to `X-Requested-With: XMLHttpRequest` to make it easier for clients to make POST/PUT/PATCH/DELETE requests without authentication.

Discussion: https://grist.slack.com/archives/C0234CPPXPA/p1666355281535479

Test Plan: Added and updated DocApi tests. Tested manually how this affects requests made from a browser.

Reviewers: paulfitz, dsagal

Reviewed By: paulfitz, dsagal

Differential Revision: https://phab.getgrist.com/D3678
2022-11-03 13:33:23 +02:00
..
client Adding type inference and makeT helper function 2022-10-20 10:34:38 +02:00
common give parseDate test more time (#278) 2022-09-09 17:05:29 -04:00
deployment Adding new lines at the end 2022-09-30 17:00:38 +02:00
fixtures (core) Moving nbrowser tests to grist-core 2022-10-25 17:22:54 +02:00
gen-server (core) upgrade typeorm so we can support newer postgres 2022-09-02 15:34:21 -04:00
nbrowser (core) Revealing hidden pages with visible children. 2022-10-31 14:02:38 +01:00
server (core) Allow requests from untrusted origins but without credentials 2022-11-03 13:33:23 +02:00
chai-as-promised.js (core) Faster builds all around. 2022-07-04 10:42:40 -04:00
init-mocha-webdriver.js Correct spelling mistakes 2022-02-19 09:46:49 +00:00
mocha.opts (core) Faster builds all around. 2022-07-04 10:42:40 -04:00
report-why-tests-hang.js (core) Move report-why-tests-hang helper to core 2021-04-26 23:52:16 -04:00
test_under_docker.sh Adding dedicated folder for external tests 2022-09-30 16:45:35 +02:00
testUtils.ts (core) add missing tsconfig file that affects IDEs 2022-05-27 13:48:58 -04:00
tsconfig.json (core) Faster builds all around. 2022-07-04 10:42:40 -04:00
utils.js (core) Moving client and common tests to core 2022-08-23 19:20:10 +02:00
xunit-file.js (core) Parallelize jenkins by running on multiple machines. 2022-07-01 16:18:36 -04:00