Rebase from master

thomiceli · Jan 20, 2025 · 3b0a175 · 3b0a175
1 parent 062a1d6
commit 3b0a175
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/internal/web/server.go b/internal/web/server.go
diff --git a/internal/web/server/middlewares.go b/internal/web/server/middlewares.go
@@ -58,6 +58,11 @@ func (s *Server) registerMiddlewares() {
 			CookiePath:     "/",
 			CookieHTTPOnly: true,
 			CookieSameSite: http.SameSiteStrictMode,
+			Skipper: func(ctx echo.Context) bool {
+				/* skip CSRF for embeds */
+				gistName := ctx.Param("gistname")
+				return filepath.Ext(gistName) == ".js"
+			},
 		}))
 		s.echo.Use(Middleware(csrfInit).toEcho())
 	}