mirror of
https://github.com/micromdm/micromdm/
synced 2026-07-31 13:55:40 +08:00
a8dc606beb207e09ae511dc9481f94096be015db
The frontend server now runs a CSRF middleware on all paths except /assets/. To enable CSRF the -csrf_key flag must be set. Instead of enforcing the flag is set, I opted to log that CSRF is disabled. Not running CSRF means I can test with curl. In the future I might enforce that the flag must be set in release builds.
Languages
Go
96.3%
Shell
3.1%
Makefile
0.5%