Someone asked to use the DTI API for a small client-side project, so I'm making this change to support it! As explained in the comment, I think this should be safe regarding CSRF attacks. But it _does_ increase the risk that someday we change something elsewhere that creates a problem, like using cookies to authorize something. So, let's remember to be careful! (as I would hope we would be when adding another auth mechanism!) |
||
|---|---|---|
| .. | ||
| allWakaValues.js | ||
| graphql.js | ||
| outfitImage.js | ||
| outfitPageSSR.js | ||
| sendFeedback.js | ||
| uploadLayerImage.js | ||
| validPetPoses.js | ||