Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / j0lvera/next-csrf issues and pull requests

#71 - Missing HttpOnly Cookies with setup() Wrapper Usage

Issue - State: open - Opened by xereda 8 months ago

#69 - Next.js v13

Issue - State: open - Opened by MaximKing1 over 1 year ago - 2 comments

#68 - Do not lower case CSRF Secret key

Pull Request - State: open - Opened by tochoromero over 1 year ago

#67 - Failed to read secret cookie in setup function

Issue - State: open - Opened by tochoromero over 1 year ago

#66 - Bump minimist from 1.2.5 to 1.2.8

Pull Request - State: open - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#65 - Bump minimist from 1.2.5 to 1.2.8 in /example

Pull Request - State: open - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#64 - Bump http-cache-semantics from 4.1.0 to 4.1.1

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#63 - Bump cookiejar from 2.1.2 to 2.1.4

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#62 - Bump json5 from 1.0.1 to 1.0.2

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#61 - Bump json5 from 1.0.1 to 1.0.2 in /example

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#60 - Bump json5 and next in /example

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#59 - Bump json5, tsconfig-paths and next

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#58 - Keep original args of handler so we have access to the context

Issue - State: open - Opened by rduque1 almost 2 years ago - 4 comments
Labels: enhancement, help wanted, good first issue

#57 - Bump qs from 6.5.2 to 6.5.3

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#56 - Bump decode-uri-component from 0.2.0 to 0.2.2

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#55 - Bump decode-uri-component from 0.2.0 to 0.2.2 in /example

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#54 - Bump loader-utils and next

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#53 - Bump minimatch from 3.0.4 to 3.1.2 in /example

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#52 - Bump loader-utils and next in /example

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#51 - Issues on live server

Issue - State: open - Opened by vampiregrodon about 2 years ago

#50 - handle getServerSideProps with return GetServerSideProps type

Pull Request - State: closed - Opened by candraaji about 2 years ago - 2 comments

#49 - The implementation probably defeats the purpose of CSRF protection

Issue - State: open - Opened by sha256 over 2 years ago - 3 comments
Labels: bug

#48 - Pass context back to GetServerProps handler

Issue - State: open - Opened by al-bimani over 2 years ago - 4 comments

#47 - Bump jsdom from 16.4.0 to 16.7.0

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies

#44 - Bump next from 9.5.5 to 12.1.0

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#43 - Bump next from 9.5.3 to 12.1.0 in /example

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#42 - Bump ssri from 6.0.1 to 6.0.2 in /example

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies

#41 - Bump ansi-regex from 5.0.0 to 5.0.1 in /example

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies

#40 - Prep for release

Pull Request - State: closed - Opened by j0lvera over 2 years ago

#39 - Bump minimist from 1.2.5 to 1.2.6

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#38 - Internal server error

Issue - State: closed - Opened by Darren120 over 2 years ago - 2 comments

#37 - Bump next from 9.5.5 to 11.1.3

Pull Request - State: closed - Opened by dependabot[bot] almost 3 years ago - 1 comment
Labels: dependencies

#36 - how to use in API endpoint

Issue - State: closed - Opened by nizarfadlan almost 3 years ago - 15 comments

#35 - "Signed cookie string must be provided." with multiple cookies

Issue - State: closed - Opened by vla-dev almost 3 years ago - 2 comments

#34 - Avoid calling 'unsign' in case if the token from cookie is 'undefined…

Pull Request - State: closed - Opened by vla-dev almost 3 years ago - 1 comment

#33 - Do I use correctly next-csrf ??

Issue - State: closed - Opened by nataliagoskapracuj almost 3 years ago - 5 comments

#32 - Parse method always returns an object

Issue - State: closed - Opened by CarlinCanales about 3 years ago - 1 comment

#31 - Bug fix extracting tokenFromHeaders

Pull Request - State: closed - Opened by yuriharrison about 3 years ago
Labels: bug

#30 - Broken middleware

Issue - State: closed - Opened by yuriharrison about 3 years ago - 3 comments

#29 - Highlight the preferred way to use `next-csrf`, with the API route's alternative

Issue - State: closed - Opened by j0lvera about 3 years ago
Labels: documentation

#28 - Explain in the documentation when you need CSRF mitigation. Not every project needs it

Issue - State: open - Opened by j0lvera about 3 years ago
Labels: documentation

#27 - Explain in the documentation why exposing an API route to set up the CSRF token is a bad idea

Issue - State: open - Opened by j0lvera about 3 years ago
Labels: documentation

#26 - How to protect api routes on first request?

Issue - State: closed - Opened by gabrielkuettel about 3 years ago - 1 comment
Labels: enhancement, good first issue

#25 - Env variable cant load on browser

Issue - State: open - Opened by vedrane about 3 years ago - 3 comments

#24 - Bump next from 9.5.5 to 11.1.0

Pull Request - State: closed - Opened by dependabot[bot] about 3 years ago - 1 comment
Labels: dependencies

#23 - "TypeError: Secret string must be provided."

Issue - State: closed - Opened by Brawl345 about 3 years ago - 21 comments

#22 - Header ‘xsrf-token’ is not allowed

Issue - State: closed - Opened by emmarvpol over 3 years ago - 1 comment

#21 - emit typings in build

Pull Request - State: closed - Opened by thegoleffect over 3 years ago - 1 comment

#20 - Bump color-string from 1.5.3 to 1.5.5

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#19 - fix 'inherits' of undefined

Pull Request - State: closed - Opened by j0lvera over 3 years ago

#19 - fix 'inherits' of undefined

Pull Request - State: closed - Opened by j0lvera over 3 years ago

#18 - Bump trim-newlines from 3.0.0 to 3.0.1

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#17 - Bump ws from 7.3.0 to 7.4.6

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#16 - Bump lodash from 4.17.19 to 4.17.21

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#15 - Bump hosted-git-info from 2.8.8 to 2.8.9

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#15 - Bump hosted-git-info from 2.8.8 to 2.8.9

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#14 - Bump ssri from 6.0.1 to 6.0.2

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#14 - Bump ssri from 6.0.1 to 6.0.2

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#13 - Bump y18n from 4.0.0 to 4.0.1

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#12 - publish the types?

Issue - State: closed - Opened by natelindev over 3 years ago

#11 - TypeError: Cannot read property 'inherits' of undefined

Issue - State: closed - Opened by F1r3Hydr4nt over 3 years ago - 1 comment

#10 - i integrate next-csrf into my site which i build in nextjs but i am facing this issue

Issue - State: closed - Opened by satishktak1988 almost 4 years ago - 14 comments

#9 - docs: fix _app.js props syntax

Pull Request - State: closed - Opened by revolunet almost 4 years ago - 1 comment

#8 - Bump ini from 1.3.5 to 1.3.8

Pull Request - State: closed - Opened by dependabot[bot] almost 4 years ago
Labels: dependencies

#7 - I think, this exposes "secret" key to client's browser. Doesn't it?

Issue - State: closed - Opened by dhavall08 about 4 years ago - 3 comments

#6 - Update functionality, docs, and bug fixes

Pull Request - State: closed - Opened by j0lvera about 4 years ago - 6 comments

#5 - Env cannot load into _app.ts

Issue - State: closed - Opened by JasonDevTech about 4 years ago - 2 comments
Labels: bug

#4 - Typo in file name

Issue - State: closed - Opened by EdwinGuzman about 4 years ago - 1 comment

#3 - Bump lodash from 4.17.15 to 4.17.19

Pull Request - State: closed - Opened by dependabot[bot] over 4 years ago
Labels: dependencies

#2 - Explain implementation

Issue - State: open - Opened by j0lvera over 4 years ago - 2 comments
Labels: documentation

#1 - Create an example

Issue - State: closed - Opened by j0lvera over 4 years ago - 4 comments
Labels: enhancement