Merge requests · Warren Gifford / sourcegraph · GitLab

security: enable public access of our GraphQL/Search/etc APIs from any domain/origin

!28775 · created Dec 09, 2021 by Warren Gifford main
apidocs cla-signed security
- Merged
updated Jan 04, 2022
security: update CSRF security model to indicate window.context is unprivileged

!28773 · created Dec 09, 2021 by Warren Gifford main
apidocs cla-signed security
- Merged
updated Dec 09, 2021
web: fix authentication when using `sg start web-standalone`

!28697 · created Dec 07, 2021 by Warren Gifford main
apidocs cla-signed
- Merged
updated Dec 07, 2021
security: remove our CSRF tokens to improve security and reduce complexity of our threat model

!28572 · created Dec 03, 2021 by Warren Gifford main
apidocs cla-signed security
- Merged
updated Dec 06, 2021
security: harden which cross-origin headers are allowed

!27931 · created Nov 18, 2021 by Warren Gifford main
apidocs cla-signed security
- Merged
updated Dec 03, 2021
security: remove our CSRF tokens to improve security and reduce complexity of our threat model

!27780 · created Nov 16, 2021 by Warren Gifford main
apidocs cla-signed security
- Merged
- 2
updated Nov 18, 2021
security: make session cookie authentication stricter

!27313 · created Nov 09, 2021 by Warren Gifford main
apidocs cla-signed security
- Merged
- 1
updated Nov 16, 2021
security: document and explain session CSRF safety better

!27303 · created Nov 09, 2021 by Warren Gifford main
apidocs cla-signed security
- Merged
updated Nov 09, 2021
security: improve clarity of CORS docstrings

!27298 · created Nov 09, 2021 by Warren Gifford main
apidocs cla-signed security
- Merged
updated Nov 09, 2021
security: remove duplicated code in CORS handling

!27297 · created Nov 09, 2021 by Warren Gifford main
apidocs cla-signed security
- Merged
updated Nov 09, 2021
security: improve readability of CORS handling

!27295 · created Nov 09, 2021 by Warren Gifford main
apidocs cla-signed security
- Merged
updated Nov 09, 2021
security: make CORS enforcement of non-API routes even more strict

!27246 · created Nov 08, 2021 by Warren Gifford main
apidocs cla-signed security
- Merged
updated Nov 09, 2021
security: enable handling CORS policies differently for API and non-API routes

!27240 · created Nov 08, 2021 by Warren Gifford main
apidocs cla-signed security
- Merged
- 1
updated Nov 09, 2021
security: update CSRF threat model to reflect a manual audit

!27236 · created Nov 08, 2021 by Warren Gifford main
apidocs cla-signed security
- Merged
- 4
updated Nov 09, 2021
lsifstore: add API docs tests

!26954 · created Nov 02, 2021 by Warren Gifford main
apidocs apidocs-search apidocs-tests cla-signed
- Merged
- 1
updated Nov 02, 2021
lsifstore: update testdata to include API docs

!26913 · created Nov 01, 2021 by Warren Gifford main
apidocs cla-signed
- Merged
- 8
updated Nov 02, 2021
codeintel: Split insert search records query

!26524 · created Oct 22, 2021 by Warren Gifford main
apidocs cla-signed code-intelligence-performance team/code-intelligence
- Merged
updated Oct 22, 2021
apidocs: fix isEnabled check for repo name + language upsertion

!26397 · created Oct 20, 2021 by Warren Gifford main
apidocs cla-signed
- Merged
updated Oct 20, 2021
API docs: add feature flag which disables all LSIF uploads, etc. & turn off by default

!26296 · created Oct 19, 2021 by Warren Gifford main
apidocs apidocs-search cla-signed
- Closed
- 3
updated Oct 19, 2021
codeintel: API docs: wrap upload handling in a panic handler

!26231 · created Oct 18, 2021 by Warren Gifford main
apidocs cla-signed
- Merged
updated Oct 18, 2021

Prev
1
2
3
4
5
Next