mirror of
https://github.com/thomiceli/opengist.git
synced 2025-05-14 08:12:09 +02:00

* Skip CSRF for embeds The CSRF middleware sets a _csrf cookie also for loading the embed javascript on third-party sites. With this change no _csrf cookie is set when loading the embed javascript (regardless if third-party site or first-party).