20140c4c15
Adds a IsRequestValidAsync method
...
Some other misc cleanup
- docs for IAntiforgeryTokenGenerator
- Add HttpContext parameter where to all IAntiforgeryGenerator methods
- rename parameters on DefaultAntiforgery
2016-02-03 08:08:30 -08:00
0ddfa5f0d8
Pool `MemoryStream`, `BinaryReader`, `BinaryWriter`, and `SHA256` instances
...
- #23 part 2
- reduce `byte[]` and `char[]` allocations because all have internal buffers
- fortunately, only `MemoryStream` has an unbounded buffer
2016-02-02 16:56:11 -08:00
96063e2476
Remove dependency on routing in sample
...
Removing the routing dependency since this is moving lower in the stack.
2016-02-02 09:24:29 -08:00
492c0798b1
Anything but `HtmlContentBuilder`
...
- #23 part 1
2016-02-02 08:51:02 -08:00
7c7a4a905e
Correct project dependencies
...
- use latest `System.Net.Http`, not hard-coded version
- add imports for the latest CLI
- see aspnet/FileSystem@4a9a0fd for the inspiration
2016-02-01 18:53:40 -08:00
9c9543dde4
Rename AspNet 5 file contents.
...
See https://github.com/aspnet/Announcements/issues/144 for more information.
2016-01-22 12:24:22 -08:00
bc0d5528a3
Rename AspNet 5 folders and files.
...
See https://github.com/aspnet/Announcements/issues/144 for more information.
2016-01-22 12:24:19 -08:00
115e89d6f8
Reacting to hosting rename
2016-01-17 17:08:20 -08:00
9e032102f6
Build with dotnet
2016-01-15 15:53:26 -08:00
807cd77307
Reacting to Hosting API changes
2016-01-12 16:03:24 -08:00
80fa2908bd
Throwing custom AntiforgeryException for token validation failure scenarios
2016-01-07 15:12:55 -08:00
a281b2e369
* Add functional tests for sample
2016-01-06 09:37:15 -08:00
0eec60b0ac
React to OptionsModel => Options
2015-12-21 14:54:54 -08:00
f49c218bdf
Reacting to new Hosting API
2015-12-18 15:24:53 -08:00
1c0996c625
Add a sample demonstrating Antiforgery with AJAX
2015-12-17 13:29:45 -08:00
bf6406bc2a
PR feedback
2015-12-16 12:48:03 -08:00
ea43ce1bb7
update gitignore
2015-12-16 12:38:21 -08:00
3280ff6ac5
Add Header support
...
This change adds support for retrieving an antiforgery CSRF token via a
configurable header in addition to the form field. This helps with doing
ajax requests in a 1st-party SPA when using cookie auth, and is similar to
functionality provided by a bunch of different frameworks.
In this change there's also a bunch of churn due to avoiding the term
'form' in favor of 'request' and 'session' in favor of 'cookie'. Where
code and error message now mention 'form' they specifically mean
form-encoded content.
2015-12-15 14:18:09 -08:00
b69aef3c51
Merge branch 'release' into dev
2015-12-11 12:23:48 -08:00
86795ab1b6
Updating to release NuGet.config.
2015-12-11 12:23:45 -08:00
463e8f9473
React to HtmlAbstractions namespace rename
2015-12-02 10:30:01 -08:00
daf16ad184
Enabling CoreCLR tests on Travis
2015-12-01 11:02:49 -08:00
6a9b38db77
Return an `IHtmlContent` from `IAntiforgery.GetHtml()`
...
- part of aspnet/Mvc#3123
- no longer forces caller to wrap the return value in an `HtmlString`
nit: don't HTML encode the word "hidden"
2015-11-25 09:44:54 -08:00
78face48d0
Ignore `launchSettings.json` files
2015-11-24 15:31:27 -08:00
130e8f0398
Updating tests to use moq.netcore
2015-11-23 11:39:40 -08:00
e2632d47f0
React to DataProtection changes
2015-11-17 14:08:22 -08:00
4c74e08bf1
Move Travis to supported Linux distribution
...
- use Ubuntu 14.04 (Trusty)
- Travis support for Trusty is in Beta and currently requires `sudo`
- run `dnu restore` with DNX Core since aspnet/External#49 is not fixed in Mono versions we can use
- add required dependencies for DNX Core to `.travis.yml`
- addresses part of aspnet/Universe#290
2015-11-17 12:26:08 -08:00
42d6166b61
Explicitly choose Mono 4.0.5
...
- avoids future problems related to aspnet/External#48
- e.g. when Travis updates default Mono version in `csharp` bundle
2015-11-17 10:49:09 -08:00
1c39930b16
Reacting to DependencyInjection changes
2015-11-13 10:33:23 -08:00
c82ac5e61f
* Return old cookie token
2015-11-12 11:52:39 -08:00
ff3c8023a0
Merge branch 'release' into dev
2015-11-03 13:34:38 -08:00
391086e3ce
Strong name Microsoft.AspNet.Antiforgery.
2015-11-03 12:51:41 -08:00
7edbabd498
React to Http.Abstractions changes.
2015-11-03 10:15:23 -08:00
84cfe5640d
React to WebEncoders changes.
2015-10-30 11:45:48 -07:00
ebcaeadf64
Merge branch 'release' into dev
2015-10-28 12:51:04 -07:00
e49daaa980
Updating to release NuGet.config.
2015-10-28 12:43:08 -07:00
c7dc5ab7f0
Switching to generations TFMs
2015-10-22 00:23:06 -07:00
e925bb1b3a
Fix local build break
2015-10-12 12:47:15 -07:00
c0517a2815
React to aspnet/Universe#290 fix
2015-10-08 19:44:57 -07:00
7a0068ede2
Renaming Microsoft.Framework.* -> Microsoft.Extensions.*
2015-10-03 15:44:46 -07:00
c555131eaa
Update 'build.cmd' alias parameter to use full name.
2015-10-01 11:58:29 -07:00
1bf932f403
Merge branch 'release' into dev
2015-09-28 23:15:45 -07:00
c5a16b3a51
Updating to release NuGet.config.
2015-09-28 23:15:43 -07:00
90539dc489
Enabling NuGetPackageVerifier
2015-09-22 15:33:36 -07:00
5392f41746
Update nuget.exe and corresponding feeds to v3.
2015-09-17 18:33:14 -07:00
e0ec2da711
Replacing NotNull with thrown exceptions
2015-09-11 17:07:52 -07:00
3240ef37e1
Adding NeutralResourcesLanguageAttribute
2015-09-10 16:25:41 -07:00
6bc4a40926
Setup ci stuff
2015-09-04 01:33:47 -07:00
83ea8051c8
Update test
2015-09-02 15:44:39 -07:00
f5c8bf09e2
React to options
2015-09-02 15:28:52 -07:00
Ryan Nowak
Doug Bunting
N. Taylor Mullen
John Luo
Victor Hurdugaci
Ajay Bhargav Baaskaran
ryanbrandenburg
Hao Kung
Pranav K
Cesar Blum Silveira
Chris R
David Fowler