isso/isso
Martin Zimmermann b839b2be31 HTTP Origin is only sent on cross-origin requests in Firefox
Therefore, only raise Forbidden if Origin (or Referer for MSIE) is sent
(which is a protected header and all modern browsers (except IE)).

Also add a basic unit test which asserts the failure for false origins.
2013-12-04 17:09:22 +01:00
..
css use SVG to render identicon so the browser can auto-resize the image 2013-10-29 16:58:38 +01:00
db remove unnecessary imports 2013-11-17 15:49:25 +01:00
ext show traceback when smtp connection failed 2013-11-25 17:02:04 +01:00
js use el.getAttribute instead of el.dataset to support IE10 m( 2013-12-02 12:14:26 +01:00
utils Merge branch 'fix/bloomfilter' 2013-11-13 20:08:08 +01:00
views HTTP Origin is only sent on cross-origin requests in Firefox 2013-12-04 17:09:22 +01:00
__init__.py add application object into ns only when using uwsgi and gunicorn 2013-11-29 14:22:21 +01:00
compat.py improve doctests and refactor title extraction 2013-10-29 12:01:45 +01:00
core.py support for gunicorn (and other pre-forking wsgi servers) 2013-11-25 13:51:11 +01:00
migrate.py use <link> tag to extract the relative post url, fixes #37 2013-11-16 20:30:48 +01:00
wsgi.py move SocketHTTPServer to isso/wsgi.py 2013-11-17 11:57:41 +01:00