1
1
mirror of https://github.com/go-gitea/gitea synced 2025-01-11 02:04:27 +00:00
zeripath 2f76608221
Prevent security failure due to bad APP_ID (#18678)
WebAuthn may cause a security exception if the provided APP_ID is not allowed for the
current origin. Therefore we should reattempt authentication without the appid
extension.

Also we should allow [u2f] as-well as [U2F] sections.

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2022-02-09 15:37:58 +08:00
..
2021-11-22 16:19:01 +08:00
2021-11-11 09:52:16 +08:00
2022-02-01 19:08:33 +00:00