larvit/plainpages
3
0
Fork 0
Code Issues 1 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

Record that state lives in the URL or on the server, never in a cookie #122

Merged
lilleman merged 1 commits from state-in-uri into main 2026-09-15 14:24:01 +02:00
Conversation 0 Commits 1 Files Changed 1
+6 -3
lilleman commented 2026-09-15 14:21:53 +02:00
Owner
Copy Link
Copy Source

Extends the URI rule in AGENTS.md: a message for the page a redirect lands on rides its query string (info-msg, warn-msg, error-msg), and a cookie carries only the session and the CSRF token.

Extends the URI rule in AGENTS.md: a message for the page a redirect lands on rides its query string (`info-msg`, `warn-msg`, `error-msg`), and a cookie carries only the session and the CSRF token.
lilleman added 1 commit 2026-09-15 14:21:53 +02:00
Record that state lives in the URL or on the server, never in a cookie
CI / full-gate (push) Successful in 2s
Details
Mirror / github-mirror (push) Successful in 3s
Details
5f9d74ae4f
lilleman merged commit 5f9d74ae4f into main 2026-09-15 14:24:01 +02:00
lilleman deleted branch state-in-uri 2026-09-15 14:24:01 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
claes.eismar.se lilleman (Lilleman auf Larv) martin.siden renovate-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: larvit/plainpages#122
Delete Branch "state-in-uri"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?