Repository navigation

sec(api): enforce CSRF on the RI-exchange session-authed approve path - #1796

Merged

cristim merged 3 commits into

mainfrom

sec/1757-riexchange-csrf

Aug 11, 2026

Commits on Aug 10, 2026

sec(api): enforce CSRF on RI-exchange session-authed approve
cristim
committed
f92c282
test(api): make the CSRF regression test assert on the money-moving call
cristim
committed
b7d7c1c

Commits on Aug 11, 2026

sec(api): stop a CSRF rejection falling through to the token approve path
cristim
committed
6026bb3