ember-ajax

ember-ajax copied to clipboard

Using the ajax `$.active` does not decrement with 422 responses

1

`$.active` is a well-known trick to discover how many pending ajax request there is on a page. Most commonly used in testing. It turns out that refactoring a `$.ajax` into...

cibernox

Consider adding CSRF protection with Transparent Token security pattern

23

It seems appropriate that Ember Ajax should nudge developers towards good security practices by making it easy to implement good security practices. Transparent Token is protection against Cross-Site Request Forgery...

taras

This probably doesn't matter for end users, but it's of interest if we eventually want to be the ajax service for Ember Data proper.

jherdman

trustedHosts checks for hostname match instead of host

5

I don't know if this is a bug, but the `trustedHosts` filter checks for a urls `hostname` instead of its `host`. ( https://github.com/ember-cli/ember-ajax/blob/master/addon/mixins/ajax-request.js#L355 ) This results in valid `hosts` not...

makepanic

olenderhub

Bumps [express](https://github.com/expressjs/express) from 4.16.3 to 4.17.3. Release notes Sourced from express's releases. 4.17.3 deps: accepts@~1.3.8 deps: mime-types@~2.1.34 deps: [email protected] deps: [email protected] deps: [email protected] deps: [email protected] deps: [email protected] deps: [email protected] deps:...

dependabot[bot]

Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. Release notes Sourced from decode-uri-component's releases. v0.2.2 Prevent overwriting previously decoded tokens 980e0bf https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2 v0.2.1 Switch to GitHub workflows 76abc93 Fix issue where decode...

dependabot[bot]