epriestley 39b4d20ce5 Create AphrontWriteGuard, a backup mechanism for CSRF validation ... Summary: Provide a catchall mechanism to find unprotected writes. - Depends on D758. - Similar to WriteOnHTTPGet stuff from Facebook's stack. - Since we have a small number of storage mechanisms and highly structured read/write pathways, we can explicitly answer the question "is this page performing a write?". - Never allow writes without CSRF checks. - This will probably break some things. That's fine: they're CSRF vulnerabilities or weird edge cases that we can fix. But don't push to Facebook for a few days unless you're prepared to deal with this. - **>>> MEGADERP: All Conduit write APIs are currently vulnerable to CSRF! <<<** Test Plan: - Ran some scripts that perform writes (scripts/search indexers), no issues. - Performed normal CSRF submits. - Added writes to an un-CSRF'd page, got an exception. - Executed conduit methods. - Did login/logout (this works because the logged-out user validates the logged-out csrf "token"). - Did OAuth login. - Did OAuth registration. Reviewers: pedram, andrewjcg, erling, jungejason, tuomaspelkonen, aran, codeblock Commenters: pedram CC: aran, epriestley, pedram Differential Revision: 777		2011-08-16 13:29:57 -07:00
..
base	Basic user/account tool.	2011-01-23 18:09:16 -08:00
log	"arc install-certificate", server-side components	2011-06-20 05:18:02 -07:00
preferences	Minor tweaks to Preferences	2011-03-31 16:07:14 -07:00
profile	Slightly more sophisticated profiles.	2011-02-19 18:28:41 -08:00
user	Create AphrontWriteGuard, a backup mechanism for CSRF validation	2011-08-16 13:29:57 -07:00
useroauthinfo	Store OAuth tokens and more OAuth account info.	2011-02-22 10:27:27 -08:00
usersshkey	Allow users to associate SSH Public Keys with their accounts	2011-07-23 09:15:20 -07:00