Victor Vrantchan a8dc606beb Add CSRF middleware to all pages ...

The frontend server now runs a CSRF middleware on all paths except
/assets/. To enable CSRF the -csrf_key flag must be set. Instead of
enforcing the flag is set, I opted to log that CSRF is disabled. Not
running CSRF means I can test with curl.

In the future I might enforce that the flag must be set in release builds.

2020-07-22 23:22:03 -04:00

..

frontend.go

Add CSRF middleware to all pages

2020-07-22 23:22:03 -04:00