Add csrf checking for cookie posts, fix file hotlinking
This commit is contained in:
parent
9ccf3d855e
commit
b9c6598250
7 changed files with 27 additions and 16 deletions
|
@ -1,5 +1,6 @@
|
|||
import path from 'path';
|
||||
import koa from 'koa';
|
||||
import csrf from 'koa-csrf';
|
||||
import route from 'koa-route';
|
||||
import views from 'koa-views';
|
||||
import logger from 'koa-logger';
|
||||
|
@ -36,6 +37,8 @@ const redisUrl = process.env.REDIS_URL || process.env.REDISTOGO_URL || 'redis://
|
|||
|
||||
const app = koa();
|
||||
|
||||
csrf(app);
|
||||
|
||||
let statsdOpts = {prefix: 'hostr-web', host: process.env.STATSD_HOST || 'localhost'};
|
||||
let statsd = new StatsD(statsdOpts);
|
||||
app.use(function*(next) {
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue