jozamudi 7f531fc309 CSRF header check now covers /login (exemption removed); login.html sends X-Aniweb

2026-09-16 02:02:09 +00:00

..

conftest.py

Lockout -> server/auth.py + per-IP failure budget (XFF trusted only behind the proxy); unit tests

2026-09-16 01:31:40 +00:00

test_api.py

CSRF header check now covers /login (exemption removed); login.html sends X-Aniweb

2026-09-16 02:02:09 +00:00

test_auth.py

Lockout -> server/auth.py + per-IP failure budget (XFF trusted only behind the proxy); unit tests

2026-09-16 01:31:40 +00:00

test_browser.py

CSRF header check now covers /login (exemption removed); login.html sends X-Aniweb

2026-09-16 02:02:09 +00:00

test_sources.py

Provider layer + hianime source (primary)

2026-09-07 01:38:53 +00:00