Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit History

Commits on Jul 27, 2022

• Renaming code intel test (#39509)

  Show description for 39b43b5
  

  Maria Craig

  authored
  39b43b5

  Copy full SHA for 39b43b5

Commits on Feb 3, 2022

• docs: Add support for Bitbucket Data Center (#30610)

  Show description for f725c52
  asdine

  authored
  f725c52

  Copy full SHA for f725c52

Commits on Jan 4, 2022

• security: enable public access of our GraphQL/Search/etc APIs from any domain/origin (#28775)

  Show description for 23f0054
  

  Stephen Gutekanst

  authored
  23f0054

  Copy full SHA for 23f0054

Commits on Dec 15, 2021

• security: add CSRF security model diagrams (#27937)

  Show description for 949873f
  

  Stephen Gutekanst

  authored
  949873f

  Copy full SHA for 949873f

Commits on Dec 9, 2021

• security: update CSRF threat model to indicate window.context is unprivileged (#28773)

  Show description for 14e6414
  

  Stephen Gutekanst

  authored
  14e6414

  Copy full SHA for 14e6414

Commits on Dec 6, 2021

• security: remove our CSRF tokens to improve security and reduce complexity of our threat model (#28572)

  Show description for ecc5407
  

  Stephen Gutekanst

  authored
  ecc5407

  Copy full SHA for ecc5407

Commits on Nov 19, 2021

• Revert "security: remove our CSRF tokens to improve security and reduce complexity of our threat model (#27780)" (#27944)

  Show description for 8a872c6
  mrnugget

  authored
  8a872c6

  Copy full SHA for 8a872c6

Commits on Nov 18, 2021

• security: remove our CSRF tokens to improve security and reduce complexity of our threat model (#27780)

  Show description for b7b2986
  

  Stephen Gutekanst

  authored
  b7b2986

  Copy full SHA for b7b2986

Commits on Nov 16, 2021

• security: make session cookie authentication stricter (#27313)

  Show description for 09900b0
  

  Stephen Gutekanst

  authored
  09900b0

  Copy full SHA for 09900b0

Commits on Nov 9, 2021

• security: make CORS enforcement of non-API routes even more strict (#27246)

  Show description for 5344b51
  

  Stephen Gutekanst

  authored
  5344b51

  Copy full SHA for 5344b51

Commits on Nov 8, 2021

• security: update CSRF threat model to reflect a manual audit (#27236)

  Show description for b5174ec
  

  Stephen Gutekanst

  authored
  b5174ec

  Copy full SHA for b5174ec

Commits on Nov 1, 2021

• doc/dev: audit CSRF threat model; document it; add key recommendations (#23949)

  Show description for 90e394c
  

  Stephen Gutekanst

  authored
  90e394c

  Copy full SHA for 90e394c

Loading