mirror of
https://github.com/i2p/i2p.i2p.git
synced 2026-06-07 17:31:43 +00:00
f13ba5d987
Replace the webapp-wide nonce with two session-bound nonce queues, one for the outer section and details/config pages, one for the inner (XHR) section. Any form-stuffing scripts that grab the nonce must be updated to store and return the session cookie also. related changes to follow reported by: bottomlineit.co.za