3 Commits (1db06bbf39b20fd3211d832610bceba6fdb25b1b)

Author	SHA1	Message	Date
Martin Zimmermann	b839b2be31	HTTP Origin is only sent on cross-origin requests in Firefox ... Therefore, only raise Forbidden if Origin (or Referer for MSIE) is sent (which is a protected header and all modern browsers (except IE)). Also add a basic unit test which asserts the failure for false origins.	11 years ago
Martin Zimmermann	4c16ba76cc	fix unittests	11 years ago
Martin Zimmermann	f0ee0a18b1	move unittest helpers into a separate file	11 years ago