Maximilian Tagher 1275cce1af Give better error messages when CSRF validation fails ... * This is important because historically these errors have tripped people up * Making security as easy as possible is important so that it doesn't just get turned off * Giving clear directions about where to get the CSRF token (a cookie) and where to send it (a header/param) is especially helpful to frontend developers not necessarily familiar with the backend codebase		2017-11-26 09:00:30 -05:00
..
Class	Add WaiSubsiteWithAuth	2017-05-12 00:13:07 +08:00
Internal	Version bump and fix for old versions of TH.	2017-03-27 12:06:44 -04:00
Content.hs	Fix deprecation warning for LTS 8	2017-07-23 12:25:29 +03:00
Dispatch.hs	Add WaiSubsiteWithAuth	2017-05-12 00:13:07 +08:00
Handler.hs	Give better error messages when CSRF validation fails	2017-11-26 09:00:30 -05:00
Internal.hs	Add hook to apply arbitrary function to all handlers	2015-12-09 11:29:13 -08:00
Json.hs	Cleanup GHC 8 redundant constraints	2017-02-05 13:35:12 +02:00
TypeCache.hs	document cache key	2014-10-02 09:11:23 -07:00
Types.hs	Update ChangeLog and Hackage comments	2017-05-12 01:04:13 +08:00
Unsafe.hs	GHC 7.10 import warnings removed from yesod-core.	2015-08-26 14:52:39 +02:00
Widget.hs	Add since lines	2016-11-30 19:36:29 +02:00