1 Commits

Author	SHA1	Message	Date
lilleman	4b2173cb84	Secure cookie flags + CSRF for our own POST forms (todo §4); SECURE_COOKIES toggle on session/CSRF cookies; csrf.ts signed double-submit token + body.ts form reader; logout is now a CSRF-guarded POST form	2026-06-18 11:12:32 +02:00