AskaEth/SenSu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: API Key 删除/创建去掉 CSRF — panel_token HttpOnly 前端无法读取

Browse Source 
SameSite=Lax cookie 已防跨站 POST/DELETE, 无需额外 CSRF header
前端 JS 无法读取 HttpOnly cookie, 无法设置 X-CSRF-Token

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
qinglong
2026-06-13 18:07:47 +08:00
parent 51c1ee84f0
commit 1d0f227267
4 changed files with 26 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/services/network_routes.yaml
+1 -1
View File
@@ -1,5 +1,5 @@
http_port: 4200
last_updated: 26822.153658933
last_updated: 27154.60330813
plugin_routes:
example_plugin:
- methods: