aboutsummaryrefslogtreecommitdiffstats
path: root/frontend/src/utils.ts
Commit message (Collapse)AuthorAgeFilesLines
* fix: CSRF cookie configuration for local network access\n\n- Changed ↵Adam Mathes11 days1-0/+1
| | | | SameSite from Lax to None to allow cookie access across localhost/IP variations\n- Added Secure=false for local development (should be true in production with HTTPS)\n- Added credentials:'include' to all fetch requests to ensure cookies are sent\n- Updated tests to expect credentials parameter in fetch calls\n\nThis fixes the 403 Forbidden error when accessing from LAN IPs like 192.168.x.x
* security: implement CSRF protection and improve session cookie security ↵Adam Mathes11 days1-0/+31
(fixing NK-gfh33y)