Bifrost/src/Bifrost.Web/Features
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Meta Vens e0b3b1a38a Vote page: cookieless CSRF (Origin / Sec-Fetch-Site) and a defined error for handler-less requests
Drops antiforgery from the anonymous vote flow: no antiforgery cookie, no hidden token.
CastRequestGuard is the one decider; VoteModel.OnPageHandlerSelected is the one gate and
answers 4xx when no handler is selected (was a NullReferenceException 500).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-11 00:09:25 +02:00
..
Bridge Enforce named future bridge surfaces 2026-06-22 16:44:14 +01:00
ConceptVotes Vote page: cookieless CSRF (Origin / Sec-Fetch-Site) and a defined error for handler-less requests 2026-10-11 00:09:25 +02:00
GitHub Implement alpha foundation workflow and GitHub sync 2026-04-22 09:50:31 +01:00
Heimdall Add native Bifrost identity registration 2026-06-22 15:07:22 +01:00
Membership Add native Bifrost identity registration 2026-06-22 15:07:22 +01:00
Motions Move public crossings onto typed Bifrost transport 2026-07-15 22:16:07 +01:00
Patronage Add project-scoped patronage checkout 2026-07-05 19:07:48 +01:00
Shared Startup validation: an allowed origin with user info is refused 2026-10-10 20:07:47 +02:00